Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
File: rrwz1bpYUjTMzvilethsoer8SqI.cer (raw, json)
Hash identifier: PWQtzlgOcCburHITymzvxmqt+GQooX8dQnN+FHiMHPE=
Subject key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D59602FEB43D6C2298D2DEA0D49D276A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jan 2024 07:58:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.217.141.0/24
IP: 194.93.123.128/25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:60:2f:eb:43:d6:c2:29:8d:2d:ea:0d:49:d2:76:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 30 07:58:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:93:95:94:12:35:03:bd:9c:9c:20:fe:66:
40:3d:f0:43:ad:56:41:ff:d3:a1:ff:5e:e1:48:2c:
1f:d2:35:19:e9:e0:e7:de:2f:14:8f:bb:d3:6b:a7:
2b:53:6d:0d:d7:35:fa:c4:66:72:36:b6:23:f6:52:
74:03:c2:6f:6e:c6:11:a6:7e:df:9d:8c:f4:b8:bd:
1c:cf:c1:37:75:66:02:08:96:04:d5:fc:ac:e8:4d:
ba:7a:0b:3d:71:d9:4b:d5:a9:50:5a:f4:78:02:dc:
cf:a9:3a:40:51:76:8f:50:ec:74:a7:f4:ac:bc:aa:
a7:1c:30:9b:6f:eb:25:d1:08:d5:2b:16:2c:34:8c:
de:48:d6:89:e5:31:8c:22:57:c4:de:11:76:25:e7:
db:58:9e:cb:d9:3f:fd:1d:87:fe:2d:c7:dd:fe:0d:
b4:ac:03:47:20:26:fd:23:36:8f:75:56:2b:27:8f:
83:98:28:68:85:d0:33:39:ef:fa:0a:44:8d:a1:bf:
97:03:8b:2d:4f:de:5b:94:53:ae:9d:5a:85:a4:e9:
9f:a9:6b:84:eb:f7:7f:2e:b7:3d:79:42:3c:0f:27:
14:62:7c:75:c7:81:0d:a0:87:68:e3:fe:24:eb:cf:
05:89:ec:8a:34:9b:2a:92:33:5f:07:96:bb:0a:0c:
33:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.141.0/24
194.93.123.128/25
Signature Algorithm: sha256WithRSAEncryption
9b:c6:a9:ad:c7:45:c6:20:10:bc:d5:9f:f3:15:54:e4:03:8a:
db:5b:a5:de:20:08:a1:c5:b9:d2:ba:d2:0f:c6:23:50:bf:95:
5c:08:a5:5e:4a:a8:32:b5:1b:c3:da:8c:bc:99:a2:d4:fa:27:
45:c9:20:1b:57:74:22:fa:f1:b2:43:e6:2f:70:02:30:36:a1:
93:6e:45:c0:03:99:57:d7:e0:13:58:eb:3f:f7:96:8a:0b:ae:
36:ee:8f:1d:47:f1:17:f6:4a:71:ed:62:29:8d:68:2a:d1:b9:
cb:3a:04:0b:27:48:66:72:13:9c:96:7d:a9:2f:25:b3:20:20:
4f:fd:06:85:61:92:b5:05:85:25:81:fc:b3:ab:f2:6f:2f:bd:
57:fb:c9:b0:9e:82:7a:fd:dd:dc:26:84:06:4d:a8:9c:15:7d:
ca:b9:4c:d4:b8:b1:e6:85:09:b7:fd:fd:82:35:8d:5d:6f:9e:
e8:8b:1f:7d:6f:48:42:f0:18:be:a4:a8:13:14:05:01:89:79:
09:0a:bd:8e:45:a0:a1:87:66:24:8f:d8:54:65:75:03:1a:73:
03:b7:31:d7:b4:97:a8:da:31:3d:f6:a6:ab:49:f8:48:83:60:
9f:3e:fe:58:87:de:a4:da:bd:d9:7c:97:84:e7:90:9a:ac:c9:
3f:84:22:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:38:50 2024 by rpki-client on console-ams.rpki-client.org