Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gijzXzqHKY2z0GmVqcbARXIRIrI.cer
File: gijzXzqHKY2z0GmVqcbARXIRIrI.cer (raw, json)
Hash identifier: mn9c5bp22fHYdXSkJCmLVQNNF8MP5rhVPRzpNRwDFKk=
Subject key identifier: 82:28:F3:5F:3A:87:29:8D:B3:D0:69:95:A9:C6:C0:45:72:11:22:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5491ECF74FF4A638C049DE6CDAA4F3B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.mft
caRepository: rsync://0.sb/repo/sb/34/
Notify URL: https://0.sb/rrdp/notification.xml
Certificate not before: Mon 01 Jan 2024 13:49:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.46.68.0/24
IP: 2a0d:a040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:49:1e:cf:74:ff:4a:63:8c:04:9d:e6:cd:aa:4f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:49:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8228f35f3a87298db3d06995a9c6c045721122b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:5d:bc:19:50:18:0f:4b:7d:d1:c5:f9:50:
96:8e:b9:a9:fb:d6:17:7f:ba:cc:b9:99:4a:49:52:
ec:1f:96:c3:4d:9a:f1:7c:ea:4e:d1:d7:cc:f3:3b:
71:01:0b:73:42:a4:1f:e3:03:88:85:69:12:9f:10:
b3:02:0b:db:cd:f4:1f:e5:d3:0d:89:8d:68:5d:bc:
5b:40:77:1a:1f:64:39:f1:4d:36:6e:b2:cc:76:d3:
06:36:2c:cd:59:1b:43:b1:5c:30:33:5a:92:01:b9:
07:f2:c7:2e:4b:53:3a:86:28:f2:08:61:65:1c:b8:
71:ca:c8:3c:18:bc:81:0e:93:08:56:9a:1a:63:60:
9e:86:c6:8d:88:d7:3c:03:d1:7f:27:5f:48:fc:69:
f4:9b:2f:9c:8d:0b:1a:03:7a:0a:8d:40:8e:06:ea:
47:f0:9c:8d:3b:ae:78:a9:6c:a5:43:8e:a2:f2:0b:
5a:f7:ff:0c:d7:1f:12:3c:37:14:9e:e9:91:62:fd:
fd:a9:31:75:d0:b4:6e:a3:19:1c:2f:76:18:4c:0f:
88:2f:22:f6:e4:12:31:73:94:9c:c6:c6:5c:bf:26:
89:15:9c:be:9e:87:e7:86:07:d3:d6:96:95:43:c1:
4f:43:65:1c:02:1f:5b:54:a6:59:9f:d9:3d:9d:e6:
49:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:28:F3:5F:3A:87:29:8D:B3:D0:69:95:A9:C6:C0:45:72:11:22:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://0.sb/repo/sb/34/
RPKI Manifest - URI:rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.mft
RPKI Notify - URI:https://0.sb/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.68.0/24
IPv6:
2a0d:a040::/29
Signature Algorithm: sha256WithRSAEncryption
56:63:ce:10:ff:9e:ea:c6:3c:87:4f:7f:a8:4f:a0:f2:ab:40:
f7:c6:59:d5:62:d0:7c:5f:37:0f:44:ce:a7:a8:b0:c7:29:9c:
3e:5f:a2:50:96:07:f0:bd:f3:0d:fe:08:e9:12:a8:bc:59:7b:
69:68:3c:00:92:04:84:af:02:fd:45:f0:2e:3a:54:84:3e:d7:
3a:a0:18:ce:92:c8:8f:49:77:d5:b3:a8:2d:0e:c3:96:f3:48:
8c:4f:b4:bc:46:6b:09:b1:78:23:ef:ca:73:ee:51:55:0b:e1:
04:84:ef:71:a1:63:0b:18:7d:7e:fb:35:b3:fa:6a:87:af:c2:
e7:08:5f:3c:33:af:24:3d:8d:1f:31:24:29:81:fb:0a:72:b4:
c8:8e:ed:3d:74:cc:1a:11:2b:d7:fc:4a:42:13:a8:c5:46:6b:
bd:46:ea:6f:35:58:61:95:07:a9:02:57:2e:89:20:76:b9:e7:
13:82:36:68:9d:9c:f8:aa:c3:9e:67:ec:a1:b6:0f:87:02:5f:
98:f7:ea:20:90:36:39:fd:05:07:8e:ca:d5:0f:2b:2f:9e:17:
b9:e4:bd:c7:ca:2b:76:6b:fe:b8:bb:36:8d:0d:40:31:46:62:
0e:a6:c0:ab:57:5e:67:af:a3:e7:22:4b:8c:6e:7c:59:51:40:
75:7f:14:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:43:56 2024 by rpki-client on console-fra.rpki-client.org