Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
File: iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer (raw, json)
Hash identifier: Lt50jlTcA/1Rsi+TDVAh2uOxEBmqHSqJVvdaqBHeARs=
Subject key identifier: 88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94CCB10DC5599F706A636385966AEAB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 192.33.221.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:cb:10:dc:55:99:f7:06:a6:36:38:59:66:ae:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ef:4e:ac:91:81:83:b7:68:7a:60:44:4a:47:
30:6b:fb:95:7c:ef:c4:7b:0f:c9:6c:fe:6e:1d:8d:
0e:e7:72:25:cf:4a:b1:be:2a:a6:aa:82:f5:76:1e:
07:45:8b:68:36:54:dc:2d:f1:33:4b:b5:52:e9:8f:
57:b3:28:04:b5:8e:5e:cb:d7:cd:26:34:ef:d5:94:
35:f7:8e:67:fb:96:51:f9:35:0f:9d:28:17:07:61:
5c:2e:38:aa:31:df:20:fd:ce:64:70:07:a3:e9:5d:
30:60:16:09:04:22:79:50:40:21:73:f9:73:c1:35:
79:b2:47:56:0c:e8:e1:55:20:48:a6:ff:ce:18:38:
26:a6:fe:0b:9d:2b:d3:4b:da:20:70:7b:fc:a1:0f:
8b:fe:09:b8:51:32:43:16:aa:7d:ae:29:72:6a:38:
99:af:60:8b:40:be:d2:1f:73:48:54:66:0e:a8:f3:
52:8b:65:ba:34:08:9f:95:e3:0f:35:8b:db:aa:d6:
37:40:71:7c:8f:47:78:4c:42:d8:6f:fc:1e:12:03:
5e:cb:d3:b9:cd:22:b8:48:29:2f:20:4f:11:a3:05:
56:e6:fb:c6:69:6f:d5:a5:66:82:9f:b2:37:09:8e:
8c:17:49:cd:ac:db:3c:92:20:7f:a9:3d:f4:02:a3:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.33.221.0/24
Signature Algorithm: sha256WithRSAEncryption
33:3a:3c:b7:80:56:35:09:28:20:5a:6e:37:01:8b:f2:fc:9a:
49:6b:0f:15:e5:8e:f4:c1:75:37:a8:df:6b:f7:80:d5:27:2e:
3e:da:3c:fc:76:12:ea:5c:2d:9d:ec:f9:41:8d:f9:84:0d:ba:
f1:7d:55:23:e7:a0:b7:8e:bd:ab:eb:e4:9b:7a:32:a9:b8:6a:
bc:e0:44:cc:0f:f1:a9:7d:f6:0d:ee:85:b6:44:72:b7:52:c7:
28:fa:0d:c9:04:24:e2:e9:0d:f6:c8:9c:79:54:f3:5d:e2:26:
66:5a:38:df:b5:ee:1c:66:d4:a1:67:a6:5d:9a:fe:18:51:48:
09:20:77:0a:8a:13:a9:ce:69:11:25:c0:0e:05:a5:12:9c:45:
bc:2f:a3:90:14:e2:90:0b:8c:2d:43:73:33:5f:a9:8b:2c:b6:
20:ac:bf:8e:c0:e0:ae:0a:7f:b1:6c:a2:32:1e:f4:1d:3b:40:
80:96:5a:9c:c6:3e:fd:77:e7:39:6d:51:eb:a1:21:b4:de:e5:
9a:cb:92:1f:be:f2:5c:c6:ed:fd:c4:cf:a5:94:10:3d:ac:59:
02:a5:84:cd:43:b3:ed:87:4e:5b:bf:f4:1e:66:82:34:54:4b:
26:1b:ff:7c:42:23:d3:7c:23:1a:12:f1:09:07:7a:e8:da:1c:
78:6f:f5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:58:32 2024 by rpki-client on console-ams.rpki-client.org