Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
File: pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer (raw, json)
Hash identifier: BdRVv+4hQCIEcEAjPinyhKfQYQNuojT0ZRmFC2tMiaU=
Subject key identifier: A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC77B3330BAAA1F4506D9A5FDB5A33
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.109.88.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:77:b3:33:0b:aa:a1:f4:50:6d:9a:5f:db:5a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:1f:23:fb:4e:c1:4c:19:35:45:fa:e3:de:
bc:57:ee:15:14:74:52:6c:ab:65:bc:6d:8e:1f:12:
95:70:eb:4d:69:dd:c5:ee:86:65:f9:f6:c6:3f:ce:
1a:ec:1b:28:6c:7b:de:78:96:8c:dd:a4:72:b5:5e:
b8:37:b8:1e:87:79:89:bf:b4:0d:e4:76:11:35:e2:
5c:3d:24:c7:fd:6d:51:9e:59:9e:c8:af:76:ce:80:
18:4a:38:d2:67:66:61:a1:d2:3b:48:6d:bc:cc:9e:
ba:34:04:2a:23:68:77:14:c5:eb:26:6c:6e:9e:7e:
ff:43:0b:76:63:d9:f5:ab:cc:b2:68:27:f8:17:52:
39:c5:db:32:8c:ab:6a:2e:f2:fe:56:09:03:9e:ca:
2e:ab:92:0c:c1:cd:61:8c:a0:6f:cb:7f:d5:79:76:
2c:be:1e:4b:77:e5:3f:58:e6:0c:d1:c1:5a:ca:2d:
4c:4b:16:27:4c:63:52:c8:2a:1a:0b:ca:f9:91:4a:
55:11:e9:ca:ad:15:4d:bf:71:bf:dd:35:9e:b3:72:
0c:99:df:50:f9:1f:0c:06:9a:e9:46:98:ce:c8:0b:
95:73:f3:91:6b:76:e8:fa:ed:92:8b:fc:8c:11:e8:
05:56:34:eb:87:51:0d:9c:01:49:4a:47:9b:1d:06:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.88.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:9f:67:2d:64:1c:ff:e7:eb:ea:15:79:01:07:6c:27:dc:b2:
34:3a:ec:6b:87:57:e3:01:85:9d:cf:a7:8f:14:b0:3e:81:f8:
98:bc:cc:ee:7d:b1:5f:40:04:53:5d:54:52:bd:20:2d:fd:b4:
2a:3f:fc:f4:6c:11:6b:40:c6:f9:89:9f:ea:7c:78:d2:7f:3f:
5d:d2:ab:99:f9:89:c2:b7:38:31:58:ae:9c:98:05:ef:f8:99:
de:c4:2f:76:d3:a3:f9:e9:dc:da:02:6e:56:34:04:19:ff:50:
05:cd:86:fc:22:77:d6:d1:73:f5:a9:7b:0a:8b:ea:2a:c7:07:
f1:c8:ac:83:cf:1f:51:06:c4:ce:90:a5:58:c2:84:cd:69:12:
13:2f:fc:d3:03:22:9b:96:96:59:39:3a:89:24:d7:d3:20:42:
6a:3d:c9:fb:60:7f:6f:b4:93:14:b3:27:67:8f:e4:bf:46:33:
82:85:be:86:4a:08:a2:48:c8:2c:b6:3e:75:1a:1d:e0:bf:82:
70:d8:e5:8a:df:b4:86:67:ef:9a:3c:43:e9:cc:5d:a4:63:c6:
3c:50:53:ce:ec:6a:4c:43:1e:27:27:ef:eb:ed:7e:7a:5f:f5:
43:1f:c4:95:ee:a3:ab:72:5c:6b:30:31:5a:d1:00:3d:a1:5c:
53:10:68:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:14:39 2024 by rpki-client on console-ams.rpki-client.org