Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kCvbgcrzPxCwX4dnsajhiLB-NBs.cer
File: kCvbgcrzPxCwX4dnsajhiLB-NBs.cer (raw, json)
Hash identifier: Kgy4ERsorPyMs+i9on/72e1YQJoFWL51nE/4V7KoejY=
Subject key identifier: 90:2B:DB:81:CA:F3:3F:10:B0:5F:87:67:B1:A8:E1:88:B0:7E:34:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC871013A2867D32545049C968D5AFD14
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/902301-5676-41fc-8ebd-7f17066957af/1/kCvbgcrzPxCwX4dnsajhiLB-NBs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/902301-5676-41fc-8ebd-7f17066957af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.92.79.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:01:3a:28:67:d3:25:45:04:9c:96:8d:5a:fd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=902bdb81caf33f10b05f8767b1a8e188b07e341b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:91:da:8c:30:e3:4a:78:19:ef:fc:1b:b6:
1c:54:a8:88:b0:fe:91:7b:64:ac:d1:99:52:5c:7b:
87:f2:3b:29:f9:c9:b4:3d:13:93:17:4c:3f:13:c2:
26:d9:e9:d1:83:2b:05:54:09:40:af:7d:84:2f:56:
f4:9c:82:51:ee:ef:6e:7f:80:03:71:b7:2d:b3:8b:
cf:e1:3c:86:85:48:2a:33:d3:aa:29:a0:5d:2a:97:
05:6f:fe:cb:ad:f4:52:38:f4:54:09:fd:32:8e:67:
d5:40:57:bc:02:98:dc:a1:6f:15:30:aa:21:28:5c:
1a:05:45:cb:3c:26:b0:ad:70:07:fe:ea:7d:65:be:
09:80:ec:bd:7c:10:58:8f:29:c7:83:aa:8a:75:de:
03:73:bb:d4:70:f5:79:d0:7a:f9:9f:47:da:87:f3:
df:45:76:8c:f6:06:7c:90:ea:5a:a8:63:fa:e5:8a:
b0:e6:2b:2f:0b:14:eb:36:47:c1:76:48:d0:57:50:
80:79:0f:9b:a3:fc:2a:ed:4b:71:08:1a:5f:0c:2b:
4d:79:2f:e5:04:97:d9:6b:9e:02:68:45:75:64:29:
69:08:b9:9d:fa:5f:08:a8:3b:1d:94:83:b8:2f:71:
35:82:22:be:b0:1a:4c:f2:83:fa:86:b1:0b:be:6b:
e1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2B:DB:81:CA:F3:3F:10:B0:5F:87:67:B1:A8:E1:88:B0:7E:34:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/902301-5676-41fc-8ebd-7f17066957af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/902301-5676-41fc-8ebd-7f17066957af/1/kCvbgcrzPxCwX4dnsajhiLB-NBs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.79.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ad:d0:b2:b7:51:8d:ea:17:d4:d0:90:3f:b8:2f:e4:91:71:
90:36:e4:54:9f:fb:7c:f4:0b:aa:f4:f7:d9:7b:3c:c8:70:ce:
af:70:17:91:92:b3:f6:b9:fc:a0:1a:bc:7c:1f:75:3c:68:87:
c2:8b:e6:6f:6d:16:2a:c6:fd:12:d9:bc:21:06:97:26:92:60:
2f:24:61:80:d2:64:0d:ce:92:a2:ba:5f:ce:ad:24:67:56:0f:
4d:38:b5:7e:25:e0:4c:e6:32:3c:51:7d:d0:f1:80:5d:d4:c4:
bb:57:0f:d1:b4:79:22:b3:5a:a0:69:46:6c:0a:3b:9c:bc:9b:
d1:62:31:1a:d2:59:e4:eb:0e:b4:1a:19:97:4c:be:e2:a5:a2:
ef:c3:71:c5:1e:fe:d4:e9:31:0c:e9:ba:e4:e4:f6:12:6d:df:
a1:5b:f4:5c:e8:d2:bd:81:36:89:df:fe:ef:c6:ab:ed:c5:f3:
7d:c5:28:b5:3f:d6:5e:fe:af:ea:33:fe:43:4b:76:4a:ff:d4:
86:17:7a:f9:9d:8f:ad:2a:fa:17:58:59:8a:74:7d:f5:5a:f2:
e4:ce:46:20:6f:13:4a:fc:89:5a:8e:3c:1f:e2:03:47:9e:ee:
96:40:d9:2d:83:f7:29:09:71:07:02:99:f8:b0:cd:bd:19:bb:
52:e0:0c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:14:03 2024 by rpki-client on console-fra.rpki-client.org