Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
File: kjGbzZsJqYSwcOLvWI_8-otzyKI.cer (raw, json)
Hash identifier: mWSLof5A09vrQiFCp9IDDmE8/GtT2gb/LMDK9gTIttw=
Subject key identifier: 92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EDB1C5EC3F3E805CAA5D61D7BECC6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.103.32.0/22
IP: 2a00:edc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:db:1c:5e:c3:f3:e8:05:ca:a5:d6:1d:7b:ec:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9b:c3:57:15:87:05:85:f8:16:ba:10:ac:16:
9b:d2:cf:cc:06:76:62:ce:0e:c1:84:79:ff:db:55:
12:f4:cf:ba:25:11:cb:e7:c3:cd:4e:20:05:99:b4:
0e:4e:e0:31:28:52:1c:d5:ad:49:5a:a9:be:e2:b4:
a1:a9:fb:60:e9:4b:30:00:b3:4d:ef:dc:9e:f5:32:
6e:cf:4b:3d:18:6c:2f:09:60:33:89:9e:80:53:17:
5e:62:a5:ff:d7:3a:ec:30:9c:b3:f4:f7:be:ac:f0:
3f:2e:cb:4c:4e:c4:64:e3:5b:aa:15:e9:36:e5:f3:
e4:42:f3:49:31:6c:1f:91:54:ae:1b:d9:0e:cb:a2:
23:2c:00:64:5b:e4:fa:7b:dc:1d:38:aa:86:f5:60:
f2:38:1f:f6:53:fc:80:0f:10:81:dc:b1:7b:ee:eb:
6f:df:5b:e8:e7:ff:f4:0e:f9:d2:06:64:66:c4:4d:
9e:24:19:ea:9c:06:74:b2:8d:af:42:b6:f2:64:17:
cc:1f:c3:bc:aa:84:7a:1a:da:ce:eb:02:f6:0b:ac:
da:bb:67:3b:4d:6c:15:f7:76:58:ca:ec:25:0d:d4:
bf:6d:39:6c:1c:64:5e:98:fb:cd:bb:f2:35:58:f7:
85:ec:5b:68:55:60:e3:8c:60:b2:f4:f3:fe:9b:07:
ed:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.32.0/22
IPv6:
2a00:edc0::/32
Signature Algorithm: sha256WithRSAEncryption
3d:77:46:39:87:af:e9:fb:ea:29:42:d1:a2:75:b1:18:80:37:
83:64:9d:c6:62:ae:8a:08:72:90:ff:82:06:37:d8:a9:03:76:
ca:dd:ec:19:2c:33:0d:c9:4d:13:a6:aa:93:24:89:a4:64:72:
61:51:15:4d:ce:27:c0:33:15:cd:b1:6c:0e:19:bf:1b:90:07:
0d:07:68:5a:32:1c:d1:e6:2b:ad:df:23:c2:cc:59:bc:f7:ab:
f4:d9:98:3c:c4:fc:a1:2a:2a:e3:5d:f5:91:e8:ee:20:1b:ed:
70:4a:b0:6a:c3:de:e8:a6:0a:73:1e:ae:1d:3d:19:1f:47:4e:
a3:e0:6d:ff:db:60:28:15:17:2c:0f:8b:38:71:6c:97:7e:a7:
4d:2e:c5:94:ef:b5:c0:ec:4b:8b:5b:80:5d:f3:0f:32:64:c0:
fb:3e:91:de:fe:f3:1f:c2:87:46:a5:fe:17:f5:b3:39:a1:16:
eb:3f:20:10:54:ba:d7:1e:8f:eb:62:20:88:3a:b6:52:9d:07:
11:51:7c:7c:a1:b1:ff:07:ef:ce:8f:fe:e6:4c:1c:2d:1f:a9:
ff:8c:7b:91:38:18:29:57:ec:a7:9e:34:ae:53:01:c6:0c:ed:
87:23:cc:a1:3d:d5:b5:71:a9:ea:ec:9c:b7:ce:ae:b7:19:41:
97:20:2a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:11:59 2024 by rpki-client on console-ams.rpki-client.org