Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gUq6-7CP9HIB2bHtYzOTtr2SWB4.cer
File: gUq6-7CP9HIB2bHtYzOTtr2SWB4.cer (raw, json)
Hash identifier: 748og1XbGp+1QydsIyfvkET9/7VjF6A05lfqJtLvha4=
Subject key identifier: 81:4A:BA:FB:B0:8F:F4:72:01:D9:B1:ED:63:33:93:B6:BD:92:58:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6A623E055BB0D6EC7A254B9421C7C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/a23fec-0474-4345-8073-85f8152916dc/1/gUq6-7CP9HIB2bHtYzOTtr2SWB4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/a23fec-0474-4345-8073-85f8152916dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 80.68.159.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a6:23:e0:55:bb:0d:6e:c7:a2:54:b9:42:1c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=814abafbb08ff47201d9b1ed633393b6bd92581e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:5a:cd:a6:d8:64:2c:67:ff:d9:ac:41:3b:
0d:9f:80:1b:61:47:7b:60:9e:55:e5:d7:bd:57:a3:
9f:d1:69:27:e2:72:ed:d9:81:61:2c:55:04:e8:a8:
bb:14:28:ae:01:9c:66:e6:ac:80:e0:66:74:1f:0c:
0d:2c:0c:bc:06:fa:77:4d:3e:3c:6b:dc:d7:0d:80:
54:ac:b6:82:9a:e4:2b:9f:6c:2e:1b:0a:ef:80:64:
ef:c2:11:3d:e5:6a:48:a0:83:d0:5d:2f:f5:24:9a:
97:23:e9:dd:af:9d:08:8a:38:b7:05:02:11:2c:e5:
cb:62:b7:26:98:f4:c3:4f:30:1c:f9:c8:a4:fb:a5:
0d:28:fc:26:2d:61:5b:e9:72:25:e1:50:08:0e:5a:
29:5b:ce:e0:31:5c:f5:fa:55:6f:6b:de:dc:b7:66:
7a:c5:18:3a:8e:84:d5:26:70:25:65:08:d7:82:9f:
a3:3a:e6:2f:59:52:4f:e8:d4:69:e0:f2:63:2d:b2:
20:aa:e2:ca:9f:6b:65:91:bf:84:01:e4:e4:ae:85:
0c:bf:65:3c:1b:f3:97:02:69:93:44:59:e0:ef:3e:
a4:43:2b:69:00:37:64:07:00:cd:af:2d:f2:d8:0c:
7f:d2:08:30:0c:73:4c:04:1d:7e:82:dd:ad:c8:9b:
a0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4A:BA:FB:B0:8F:F4:72:01:D9:B1:ED:63:33:93:B6:BD:92:58:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a23fec-0474-4345-8073-85f8152916dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a23fec-0474-4345-8073-85f8152916dc/1/gUq6-7CP9HIB2bHtYzOTtr2SWB4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.159.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ae:35:6c:48:6c:1f:13:80:30:5b:e6:3f:4c:9d:8c:38:46:
fb:07:8c:ef:e9:b3:39:79:aa:6b:37:25:5a:46:91:9b:64:29:
ec:cd:6f:5a:3f:b3:77:71:71:45:b6:e3:9c:ad:fc:df:f9:7b:
b2:3c:47:f8:27:51:74:ea:4d:a1:45:72:ca:a6:b4:7f:40:97:
47:44:3e:6e:f3:4d:50:e5:56:2a:3d:12:ea:cd:e8:fd:f4:84:
55:cb:0e:c1:e1:58:4c:e1:d7:82:1b:a1:c3:ff:48:76:1f:a0:
1c:96:19:de:9d:d4:c3:7d:4f:32:e7:bc:cc:5a:b2:ff:e8:79:
52:83:f8:c9:42:1a:dd:14:a8:cc:c7:51:d2:0c:d9:02:f9:20:
94:67:ba:26:41:b1:ac:7c:8f:e7:b9:50:0b:43:85:b8:f3:e6:
0e:6a:56:68:72:df:ce:ea:b0:2a:6a:5c:f6:be:66:48:3e:69:
6d:3c:f2:94:52:5f:a4:cc:a3:e7:af:38:c4:b2:0d:73:6d:b1:
c9:b4:07:fa:21:98:da:e0:d4:41:ea:ac:20:c5:09:38:0d:38:
ad:86:7a:65:32:6e:b0:bf:9a:85:cb:6d:83:56:ba:73:91:a7:
d1:84:91:0b:0a:5b:93:17:e9:74:f1:be:be:4d:e8:ea:49:19:
58:18:16:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:57:26 2024 by rpki-client on console-ams.rpki-client.org