Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
File: nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer (raw, json)
Hash identifier: HOGCFQx7gJ3ZqS4/nCMB45ENvnvJ/JQtOrEKSLRmWuQ=
Subject key identifier: 9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2AE1C32024A8727809A285F59B086F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:34:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 94.124.73.0/24
IP: 2a11:7c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:e1:c3:20:24:a8:72:78:09:a2:85:f5:9b:08:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:34:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f1:7b:61:db:ad:c3:2d:08:37:ac:25:20:fb:
0f:e2:49:38:eb:e1:11:fb:eb:60:af:b7:63:e3:5d:
56:eb:73:76:1c:82:0d:a6:f9:98:8b:68:2d:7c:ea:
d0:b7:5a:c8:5c:20:6b:7b:5b:60:a4:27:e7:a7:5d:
2b:62:af:e7:b1:18:87:58:ba:42:67:3f:a0:7f:98:
d5:5c:3e:78:5b:59:c0:9c:ba:e5:34:aa:cd:ef:c9:
2c:89:13:14:bb:f0:96:7e:3a:76:17:10:68:24:20:
08:ee:0b:99:54:aa:b6:97:1e:9d:6c:e2:1b:95:2a:
a4:0d:1d:d0:94:7e:dd:36:e3:44:c2:4c:73:f7:3d:
9d:87:1c:1b:22:9d:4c:b4:32:11:d0:4f:55:58:c4:
b2:ca:a9:dc:54:a7:09:51:dc:d7:bd:ac:fd:eb:e5:
06:6d:96:2f:6c:3a:d8:e1:1f:8e:f2:82:f5:0a:8c:
48:54:d3:38:00:89:51:f8:e3:13:cd:f4:0d:f4:c3:
06:a3:25:2e:30:3d:27:61:b1:59:56:ce:f1:85:d0:
05:86:52:30:aa:46:78:5e:7b:e8:ae:c1:e6:c5:bb:
25:6c:01:7d:0f:7c:4a:25:15:e1:d6:ef:b5:2d:26:
1d:5a:90:c0:8b:72:18:3b:52:68:43:64:91:fd:58:
9d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.73.0/24
IPv6:
2a11:7c80::/29
Signature Algorithm: sha256WithRSAEncryption
65:54:b2:b7:35:e8:63:ac:b4:5e:da:df:69:c5:ea:7e:f2:ef:
0b:58:05:72:62:75:6f:f2:78:87:28:dd:1b:34:24:d9:c6:0b:
6c:f6:9d:2a:27:34:ab:24:98:de:cd:c8:51:b4:df:0b:01:19:
a5:18:95:a8:df:34:c8:e6:8b:23:e8:d8:34:4e:31:fd:9e:0d:
88:3e:10:ab:7d:82:28:6b:27:52:50:b8:a8:34:69:a8:45:88:
53:e9:72:50:02:48:c1:a1:69:42:17:ab:0f:d1:75:d2:1e:f9:
fa:71:d5:64:88:3b:c4:d4:dd:c9:9e:5b:69:87:e6:9e:e3:64:
ed:0e:9e:d6:d7:87:84:02:07:85:5a:30:04:db:c8:79:f6:c6:
d5:58:7a:70:14:80:7d:66:42:7d:bd:7e:fd:79:b5:1c:6d:40:
a0:84:96:95:7f:40:07:79:48:9e:20:02:ab:08:6a:a4:89:9d:
52:71:20:a6:6d:bc:57:be:4b:9f:b1:c8:9f:f6:e2:a9:5d:3e:
57:7d:a9:ca:cf:81:92:9b:ae:e6:95:d3:6a:26:fb:24:86:45:
a5:9a:34:c9:2d:c6:90:8e:eb:43:1a:a2:f5:33:8f:e2:85:39:
33:91:99:5a:45:26:cc:bc:b9:ff:5b:df:b9:d2:f2:1c:b6:4c:
84:d7:60:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:41:39 2024 by rpki-client on console-fra.rpki-client.org