Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
File: rONjRGSGG9S_jFvH48m_09JGpN0.cer (raw, json)
Hash identifier: 3FLaS3yeZx9QxYyKNLaTZ2d+IxObQz3Gu4q3meKkNgM=
Subject key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D248A901D0770227153852A907946
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.248.87.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:24:8a:90:1d:07:70:22:71:53:85:2a:90:79:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:f8:7d:54:eb:ca:80:2e:85:d1:2f:2e:43:
0d:d0:f0:d0:2a:eb:ce:ec:67:7e:c8:6b:04:e2:bc:
9b:c9:28:ef:ab:a2:c9:44:7c:be:bf:d9:67:ec:2d:
07:44:66:a1:1c:a0:a1:02:1a:a2:b4:95:aa:ff:96:
f7:ad:e9:10:46:e8:38:7a:30:5c:4c:3d:7f:24:82:
93:b4:ed:d4:b8:76:df:4f:50:b5:79:a6:04:f0:e3:
ae:16:ea:54:5b:17:ff:14:56:8d:f4:7e:02:fc:54:
0d:b2:47:1b:d1:6a:a5:08:04:ce:86:d6:bf:df:84:
35:a2:d4:52:c5:f9:9c:3a:19:2a:b5:53:14:9a:44:
ee:75:30:ee:b1:64:17:87:b6:2d:f1:57:df:2a:94:
78:96:e0:65:8d:56:38:6d:29:43:dd:18:b8:68:8b:
37:e1:d9:42:2f:86:5e:78:0c:84:06:0a:3b:17:c6:
76:32:21:37:21:41:48:28:b6:74:a0:c0:d8:74:c9:
bf:6c:8a:8b:bd:92:5c:51:e1:d4:c6:12:3b:63:6d:
e4:fc:ee:33:e3:dd:c5:11:74:2d:9f:87:f9:07:62:
dc:71:aa:93:ab:f0:7b:80:15:7c:12:9c:1c:c9:59:
d3:dc:7e:d2:34:19:d3:55:0b:27:b5:3a:23:74:19:
4f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.87.0/24
Signature Algorithm: sha256WithRSAEncryption
11:8f:f5:36:d5:2b:4a:a7:08:64:7f:02:bd:14:27:94:4e:cb:
6a:3a:13:f6:81:f1:d9:a6:31:fc:96:1d:cb:45:b0:c0:03:e2:
e7:7e:31:55:00:1a:70:7e:2a:a9:2e:78:98:43:2a:7b:72:8c:
20:b1:37:fd:35:e7:6d:2b:5a:95:96:3e:89:4b:91:8a:43:31:
a0:c1:19:18:a9:a0:18:f1:87:71:e0:b2:a3:48:0b:b8:d1:e7:
1b:76:87:36:75:85:61:98:b0:8c:6f:b9:46:89:3e:41:d0:5e:
ca:84:0b:98:62:7c:70:4a:55:0b:a1:54:65:de:7a:af:de:31:
09:48:48:68:8c:ae:08:04:1d:f4:8e:82:3e:e0:00:6c:ba:35:
f3:8b:0d:0c:2d:de:53:10:26:4d:43:33:eb:9e:de:2d:9f:db:
6c:58:51:82:9c:77:89:b0:c4:a4:3d:47:13:02:93:05:7f:8c:
89:57:e3:1b:d4:01:1c:16:7b:1c:05:75:b8:c0:03:76:78:93:
51:88:39:19:f5:78:6e:1c:e5:0a:57:aa:34:4e:3c:41:b5:93:
46:cc:c8:35:6f:38:f3:ca:e8:e3:df:5a:9c:c3:09:70:0e:e8:
4c:81:3e:f0:b1:37:9b:fd:29:3d:ef:40:97:5e:16:b3:7d:bc:
bb:cc:21:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:38:32 2024 by rpki-client on console-ams.rpki-client.org