Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
File: neeD6azVaZL1g1-0iCGDUAygPIM.cer (raw, json)
Hash identifier: 7QKYr84DCQuqBBBj2RMn+/8/zsmDMcj7PzkZS4BqhtI=
Subject key identifier: 9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D690D3DBD3A8FD318E86D4BC520545D4F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Feb 2024 09:01:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 62.182.168.0/21
IP: 83.97.96.0/21
IP: 89.47.52.0/24
IP: 89.47.252.0/24
IP: 91.202.211.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:69:0d:3d:bd:3a:8f:d3:18:e8:6d:4b:c5:20:54:5d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 2 09:01:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9de783e9acd56992f5835fb4882183500ca03c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:29:d1:37:e5:f6:c1:c9:06:cc:7d:e9:50:b2:
db:bd:31:ca:94:71:53:4c:fd:bc:05:87:2f:0c:6b:
77:58:dd:48:fb:53:87:7e:b5:a9:d0:6e:c6:f1:22:
44:e4:42:16:b7:fa:55:ab:ca:79:f7:e5:15:0f:0b:
ff:ea:7d:44:f1:d5:1c:c2:8b:57:20:e9:fc:d0:a1:
7e:ec:7b:91:88:70:a4:fc:5f:57:a8:22:73:63:0e:
a2:35:f9:9a:d4:87:91:92:60:ef:52:fc:71:64:25:
7f:00:79:a2:78:ef:1a:a3:f5:6b:3d:17:42:68:24:
aa:d9:02:b0:5b:b3:cb:9a:55:77:cd:f5:1f:da:b8:
7c:ad:9c:c5:e1:61:8b:14:a6:d6:fb:4f:2a:ad:7e:
3a:aa:08:df:de:77:84:61:51:f7:4d:38:4f:20:87:
c8:c5:d6:72:cf:b8:00:2a:ee:16:ac:71:b9:d9:1f:
8d:4c:6b:9c:8d:fa:c6:9e:ba:ee:42:06:87:d6:dd:
42:69:51:c8:d7:f4:c4:d5:0f:75:2e:05:ac:b3:f9:
95:6a:1c:7f:f5:46:41:5d:3d:0e:b6:f9:2b:ea:7d:
1e:dd:cf:fa:b8:9f:85:74:5f:d4:33:63:5c:a2:6f:
1b:c1:10:53:0f:65:c9:5b:e2:61:7e:f6:68:2b:47:
f4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.168.0/21
83.97.96.0/21
89.47.52.0/24
89.47.252.0/24
91.202.211.0/24
Signature Algorithm: sha256WithRSAEncryption
14:97:c8:01:86:c3:8c:03:77:01:45:18:e5:95:f6:32:08:f0:
5c:3b:48:6c:2d:53:69:b9:5c:0d:53:4a:04:dc:e1:5b:b7:4b:
e2:7a:87:dd:31:0c:63:ec:a9:f6:b8:8e:79:68:d0:c2:4d:a1:
6e:ed:38:56:84:ba:9d:82:13:21:7d:c6:51:f8:6c:58:df:83:
93:93:eb:aa:18:85:59:fd:67:f4:56:bc:81:71:d0:17:90:20:
59:e3:de:87:fc:cc:02:c4:c4:a7:9c:93:cd:da:22:3e:32:71:
0c:c5:a4:c1:a1:1a:4e:4f:4f:2b:07:c7:b8:d0:31:f5:76:53:
40:b3:44:84:36:35:8e:e8:61:51:56:00:21:e2:17:66:f9:0f:
2a:17:5f:71:27:28:d1:4b:ed:7d:1d:0a:77:5b:8d:89:b4:8f:
5d:10:da:99:1c:ab:db:7c:1b:7e:45:f9:71:7d:93:20:3d:cc:
07:e4:f9:bd:2a:a7:af:de:dc:24:80:5d:87:cd:ce:ea:84:e5:
a0:bb:66:d6:90:8a:3c:76:90:8a:5d:d3:58:8f:2d:ec:1b:f3:
a4:66:22:67:22:69:c2:63:b2:48:62:48:49:3c:7f:bd:22:d5:
f4:19:f9:c8:31:34:f2:b1:26:4c:99:1f:a8:73:b9:fb:80:54:
30:e6:b3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:57:45 2024 by rpki-client on console-fra.rpki-client.org