Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer (raw, json)
Hash identifier: onkE59yIEWRgMF6qNlSxK7T9DiT6DACw+CDB5PGVyXE=
Subject key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D2FBC362567A43939534F5C9275F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 109.235.96.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2f:bc:36:25:67:a4:39:39:53:4f:5c:92:75:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b3:7d:69:db:c7:dd:16:98:56:0d:ec:4d:cb:
39:97:17:8f:6a:35:93:2a:4a:81:fe:99:7c:73:fc:
4e:a5:f0:9d:11:17:98:57:be:d2:26:0b:fa:a3:d9:
62:cb:0d:e2:1d:d2:79:ac:7d:61:b0:9f:46:af:4f:
3b:09:b1:f5:d4:f6:5c:9e:87:4f:3d:6c:4d:a1:66:
0b:c3:7f:24:d6:ac:e3:ad:b7:67:cd:47:8d:02:7a:
6d:d3:33:a1:84:37:02:e5:26:de:a3:07:5a:f2:3e:
55:d2:5e:c8:e0:ff:21:cc:79:a4:84:63:3d:94:db:
b0:1e:64:f1:34:1b:bc:79:19:08:12:f5:a6:b3:49:
8e:05:75:53:6a:ed:07:d2:46:62:f8:c6:45:fb:f4:
dd:8f:23:79:0a:d3:7e:48:93:db:84:6a:64:eb:92:
e0:e7:3c:7e:a4:3e:30:12:30:9c:8c:57:4a:c4:13:
d7:78:a8:99:1d:c3:b0:a2:32:81:b4:f3:ba:7c:5d:
58:4a:0a:5a:bf:89:9d:56:46:d1:38:be:27:33:eb:
71:03:16:6b:0d:c6:17:75:cc:a1:b1:20:6e:fb:e6:
35:f5:99:40:da:bd:58:75:be:3f:5d:ea:85:64:c8:
0c:d3:46:86:16:c2:6e:49:0d:92:71:fa:7c:8b:04:
f9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.96.0/22
Signature Algorithm: sha256WithRSAEncryption
56:fb:62:be:44:4a:bc:de:d1:7f:21:6f:6b:81:2f:4f:10:c2:
ed:fa:d7:0f:94:3c:15:5e:f7:d8:4e:5e:ce:32:df:84:30:86:
1c:41:5c:0d:38:7d:69:2b:06:e9:0f:7a:40:60:2a:55:25:06:
96:90:3e:f2:e8:5c:01:dc:c4:a4:14:cb:05:54:86:5b:88:57:
ea:83:60:e5:16:18:aa:77:90:20:7f:ef:bb:0b:80:80:29:b6:
bc:d2:50:c2:02:cd:39:61:70:a8:e3:96:7c:69:ec:f9:86:d2:
68:8a:01:b1:a3:f0:d5:7a:7d:1b:9b:ef:4e:71:37:f6:0a:12:
86:68:71:e3:76:cf:ae:3a:97:ec:45:bd:81:e2:24:ec:e8:6c:
d9:dd:e0:65:33:d6:72:33:32:74:c6:be:4b:f7:1d:45:a9:83:
a5:6b:49:44:cb:a1:0b:67:25:c8:f1:78:6a:9c:30:80:ea:c8:
e4:ec:4f:d6:d6:f2:87:0d:09:3f:53:59:b0:24:f3:5c:d7:40:
bc:cd:aa:4b:a7:a3:f4:2d:b6:26:9f:38:b4:df:76:98:2a:74:
5d:7a:a5:a0:dc:9e:4c:68:17:db:b9:56:25:13:a2:ed:a8:15:
64:45:db:49:20:a0:81:0d:59:37:b7:76:f4:21:86:4e:38:f7:
a3:92:fd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:52:40 2024 by rpki-client on console-fra.rpki-client.org