Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
File: iloI9Bw3MCfggbXByoqAC_GFXZ8.cer (raw, json)
Hash identifier: RlqzZ/i9L3vqeMQL9suRR4EeU06ADR6/g/cmeiMmUME=
Subject key identifier: 8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BBC2E15F746737F61B6B27BACFA261
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.207.183.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:c2:e1:5f:74:67:37:f6:1b:6b:27:ba:cf:a2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a5a08f41c373027e081b5c1ca8a800bf1855d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:26:67:b7:b6:9e:25:dd:b3:5c:d6:71:0d:
64:2e:1a:dc:8a:17:83:c8:95:18:84:07:c1:65:9d:
99:81:82:e4:d7:77:3c:b7:1b:80:37:6f:54:69:63:
46:ec:d3:15:b4:58:57:c5:24:ee:c4:9c:47:d8:4c:
c9:2a:b1:96:38:97:07:78:6e:00:b0:c1:3c:f1:18:
cb:b8:cf:26:6e:9e:0c:2a:d6:f5:20:8d:a2:7f:3c:
65:bc:e7:06:d6:f2:77:e4:ca:3c:ff:a4:71:c1:5f:
16:08:e9:7f:fb:06:f1:32:aa:c7:e3:db:ee:89:6c:
09:c0:58:3d:fb:6b:71:49:9e:c1:40:36:c4:bf:d8:
18:70:b1:c4:5c:60:49:69:6a:e2:c6:99:c8:c5:bc:
bb:11:7a:37:ce:bd:8e:d7:dd:46:b7:84:14:cb:f3:
40:dd:b6:32:d4:f7:b2:40:4c:a4:a4:cb:61:8f:0b:
ef:ce:ce:e5:11:2a:c0:d5:4e:fc:fb:e4:c8:a6:4f:
bc:49:bd:bd:47:04:19:ab:f2:a8:fc:bc:fb:db:11:
86:9d:bc:71:b0:02:71:c9:fc:d7:a3:61:24:3a:21:
bf:5d:0b:0b:0a:dd:ea:5d:05:57:fb:d9:75:38:13:
76:1c:59:3e:92:bc:a7:69:fe:d6:5b:d2:f8:e7:e7:
cf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.183.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:89:85:14:15:08:b9:b4:87:66:18:14:15:3e:0f:9f:7b:90:
67:01:3f:f5:7a:97:25:c8:07:2c:e6:2e:ae:45:b7:c6:cb:48:
67:31:d1:49:83:61:46:8a:af:e1:24:43:c7:56:43:5d:cf:f8:
9c:8e:d1:65:1b:08:a6:40:e0:fb:0b:13:25:e7:37:02:3a:af:
7e:8b:86:68:d7:aa:6d:01:1c:c2:c1:58:e9:0b:52:c0:7b:8b:
f7:8b:48:85:53:e8:a9:c8:8e:e9:e9:58:e5:bb:37:80:47:08:
58:86:c4:ca:5a:79:d4:e1:fd:7d:86:e3:0e:57:16:0c:19:1c:
52:7b:7e:ff:77:f6:1e:e7:79:54:23:3d:0a:b2:c0:56:7a:21:
49:90:23:64:3c:bc:d2:4d:b9:7f:2a:c4:7b:5d:d5:b2:23:c9:
5b:62:48:0c:2c:bc:f4:e4:ae:f3:b9:3e:5d:98:26:c6:93:57:
37:13:e5:5b:42:c5:d2:48:fe:cb:ae:91:d3:b5:a0:87:7c:49:
a3:f0:35:43:c2:52:82:63:4d:03:c4:91:48:6d:d1:d6:3e:3e:
10:95:4a:97:3e:e3:6c:6b:ed:df:22:90:ef:01:49:ea:40:4d:
28:ef:39:ba:f2:11:89:43:8d:27:3a:60:60:6f:3d:c8:42:23:
46:33:a2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:10:37 2024 by rpki-client on console-ams.rpki-client.org