Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
File: iuE5rwiZ9da1syWBNz7aMDfqMMA.cer (raw, json)
Hash identifier: FRANdq6pT3zOitBJqmCJn9Pm92BsI1Pf2Hh7ELRSbfw=
Subject key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348A5DD557AB454FA85AC74CF9DA5C6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.105.19.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a5:dd:55:7a:b4:54:fa:85:ac:74:cf:9d:a5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:47:50:fb:4b:12:de:8a:6f:b9:07:f6:ca:
8e:90:42:8a:07:7f:02:83:bd:a0:7e:9d:2b:b7:4b:
6b:28:c4:5b:4c:e2:39:d7:94:e6:da:ae:f9:62:b6:
55:01:25:30:bc:24:93:6b:0b:b0:db:4c:cc:e1:1d:
ec:a8:5d:92:2d:b6:48:6e:7c:60:f5:98:e9:d3:c1:
8e:99:34:a2:df:a2:dc:71:41:19:a4:af:bc:e9:42:
87:29:b0:dc:79:81:f4:91:1c:18:a1:d8:a2:18:46:
01:ce:c1:f4:2a:56:94:56:60:c5:60:53:28:a1:64:
24:8f:94:61:b5:96:b2:dc:d1:a6:de:bd:ce:ad:eb:
88:8d:05:a2:f5:64:61:2a:5d:ce:7a:57:bb:ac:aa:
d8:81:82:b5:5d:1b:b5:5f:e1:52:53:84:c8:99:d9:
dc:bb:85:d2:b9:b5:0f:b5:ff:77:34:3d:5a:7a:e2:
a3:67:bc:a6:94:1b:5d:0c:c3:43:84:5f:0b:92:85:
99:c5:6a:b6:2d:39:75:5b:a5:ee:a9:8e:e0:a2:34:
d4:c3:c9:7f:31:3f:d8:5d:f6:94:ee:bd:22:89:30:
50:e2:aa:38:68:2c:ba:68:c4:e3:14:88:58:94:75:
63:6b:ae:09:07:f2:a2:ec:ac:d2:b0:4b:81:28:d2:
44:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.19.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:7e:3c:d7:d6:81:c1:8d:d4:46:7f:71:36:4c:46:22:a0:5d:
58:f3:45:49:b0:01:0e:0a:bf:6c:3b:15:d0:4b:02:38:2d:73:
c9:b0:ff:9c:17:01:4a:72:87:ac:16:ed:9e:4c:eb:38:08:41:
19:83:7e:fa:8f:64:af:6a:b2:39:c8:5c:7e:cb:fc:ed:09:84:
43:8d:b4:dc:4a:5b:e2:8e:72:d3:f6:97:8c:1d:bf:99:b0:1f:
0c:44:1c:cc:3c:fe:f2:06:ab:69:7a:c9:1f:f5:36:66:bd:84:
89:fb:20:0d:be:54:e5:2e:0b:4c:f8:8c:f8:36:2b:fc:41:aa:
36:21:4c:c5:93:c7:f5:c9:50:64:05:db:1e:ce:31:3b:df:2b:
90:24:65:a3:83:bc:5a:23:36:29:30:8c:9b:98:02:59:15:94:
3d:ee:cb:26:f9:5b:ec:39:d0:cd:ee:3b:44:56:18:ad:f8:ad:
c1:63:94:51:74:6e:31:ed:bb:9f:46:29:6f:35:91:aa:4d:46:
70:01:47:85:05:c3:29:bd:e3:54:d8:25:80:b0:10:d5:12:ec:
55:8f:1d:7b:13:32:53:5e:01:f5:d0:d9:20:67:cd:2e:b6:6e:
9d:63:b5:78:7b:d4:49:6c:08:a8:85:8a:49:02:8a:57:4c:3f:
26:96:62:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:10:48 2024 by rpki-client on console-ams.rpki-client.org