Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
File: gDLAf6oi_rWWn_HztJBdHqHk3us.cer (raw, json)
Hash identifier: IMtKD+u4UgZIDJKllu4Ec7g/UE5ISZbOQW/3+iMMgqo=
Subject key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D84C05547660EDF27F5F721D6487A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:30:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:10b0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:84:c0:55:47:66:0e:df:27:f5:f7:21:d6:48:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:15:81:8b:22:7c:d7:15:87:9b:0d:a9:46:
12:47:e2:51:0a:dd:89:ba:af:85:aa:4d:b4:2e:a1:
95:94:f6:04:10:37:91:c4:c6:da:7c:f8:96:34:58:
49:11:b4:e1:4a:95:b8:44:d8:6f:2c:12:7b:c2:a4:
5f:3f:e8:1e:50:8d:33:8d:ac:7a:a8:83:f1:31:38:
7d:40:75:db:26:f2:ca:c0:4b:b7:b3:5c:98:c3:2b:
e2:a7:48:7c:2c:da:27:1b:cd:4a:ba:ae:7b:fb:e9:
0a:37:7b:ea:35:5e:ec:31:10:1a:53:93:c2:3d:2e:
94:d0:b0:b1:fc:b5:fe:0d:a1:86:ec:c2:a7:43:cb:
44:32:82:81:88:95:5f:26:e3:57:38:cd:20:7e:12:
56:a9:67:b2:7e:1a:d3:e5:2e:e2:d9:a3:e2:34:77:
1e:00:64:d6:f1:75:2a:2d:14:f3:65:7a:55:ba:73:
7c:70:68:fc:70:5d:97:e2:41:c8:06:0e:7a:82:a8:
c3:f9:5b:6b:29:c3:15:42:90:64:5d:c2:65:43:ea:
ca:df:bc:f6:33:7f:76:e6:c8:46:9a:9c:b6:4b:4d:
e3:e9:47:4c:45:d3:61:6d:d7:17:e6:e5:9e:12:55:
9a:40:6b:23:20:14:f2:cd:cf:1b:97:51:77:12:94:
ef:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:10b0::/48
Signature Algorithm: sha256WithRSAEncryption
76:f5:33:f0:04:1a:1f:24:24:43:b4:44:93:fb:85:51:08:dc:
fa:96:78:03:31:f4:12:7e:bd:c4:83:e6:9e:83:4f:39:22:3a:
42:bc:7a:1d:1d:36:0d:82:aa:8a:64:2f:82:b4:fc:cb:23:91:
14:1b:d5:48:0a:76:ed:89:6d:f4:1f:49:aa:11:1d:c3:c4:f5:
e3:fd:bc:c9:c9:0e:5b:5e:f6:a3:35:73:33:25:20:ea:11:03:
6b:4d:95:96:87:c5:b4:bc:26:9b:c9:a9:35:c5:9b:43:eb:d6:
48:a7:b4:00:0b:bf:64:03:61:4f:2f:63:70:e1:8c:b1:d2:97:
a7:f5:e4:67:b7:61:8a:5f:fa:67:d5:15:bb:fd:5a:44:52:04:
f7:45:fa:70:0f:78:1f:05:a8:8d:ed:be:93:d1:c6:34:e1:72:
7d:20:57:50:ba:01:80:7d:4c:1e:1a:bc:22:11:15:19:9a:7e:
f5:aa:97:ca:80:86:67:de:37:9a:cb:97:dd:93:a6:51:de:9b:
6c:e4:3a:de:e7:9e:fc:06:ef:bf:b0:5e:1f:cd:9a:c8:ca:e3:
9c:69:c5:64:26:3c:9a:1f:40:4c:ea:98:86:a7:cf:1a:fa:3a:
84:a7:53:c3:59:42:1f:a2:13:f0:c2:4b:fa:d6:d5:c2:bf:08:
6c:2c:c0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:28 2024 by rpki-client on console-fra.rpki-client.org