Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sKv_-IXKVLslJjgPclBR1T5yE8A.cer
File: sKv_-IXKVLslJjgPclBR1T5yE8A.cer (raw, json)
Hash identifier: +IXv7CNvAQuhgY4r73iHTVprwRfQca+deswQC/C6SUc=
Subject key identifier: B0:AB:FF:F8:85:CA:54:BB:25:26:38:0F:72:50:51:D5:3E:72:13:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF3919CBBBD54A65B95774476F4F06
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/2daf90-9c17-44c6-8082-3450f0d7afdd/1/sKv_-IXKVLslJjgPclBR1T5yE8A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/2daf90-9c17-44c6-8082-3450f0d7afdd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.149.192.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:39:19:cb:bb:d5:4a:65:b9:57:74:47:6f:4f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0abfff885ca54bb2526380f725051d53e7213c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:af:ea:68:d9:ec:ee:8e:aa:74:ee:0b:af:13:
20:af:d2:6d:a4:c4:3a:d0:ef:f4:c3:45:8e:19:5c:
8f:97:66:c3:0e:92:e1:21:5d:f6:20:d7:57:13:11:
33:41:39:03:a6:82:f7:fc:3d:dd:cf:fa:6c:2b:01:
09:0d:55:bf:54:b4:52:49:83:a0:06:cb:77:a3:0c:
75:a1:3f:e2:52:8d:95:c9:c3:ff:3d:8a:69:12:0c:
ab:71:4c:b2:c3:25:af:70:30:03:4c:1b:46:4c:99:
1d:69:1f:ff:65:52:e4:7a:01:4e:2c:fe:22:e1:41:
f7:e8:60:a5:4a:9d:c4:3a:50:45:56:a3:d2:cd:1b:
d1:87:60:ec:32:8b:2f:d2:fa:07:f7:0c:f9:1c:7f:
81:83:12:5c:9f:be:86:c3:6f:92:14:63:7e:d2:ca:
f8:b5:1c:ef:fa:00:58:f3:fe:58:08:7f:f3:eb:9a:
3f:29:c4:e8:1c:c7:cf:7b:9e:02:f9:3a:0c:4c:ab:
a8:bd:4a:fe:cd:ca:e0:4e:85:58:ca:a8:b7:05:7b:
ef:93:e5:20:fc:f8:8b:2c:ce:0a:e7:06:a6:f8:30:
1b:f9:3d:60:fe:3c:4c:10:60:0f:b2:92:1b:6e:ec:
9a:77:a5:6c:9b:69:61:2d:ab:a4:24:87:98:38:64:
f8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AB:FF:F8:85:CA:54:BB:25:26:38:0F:72:50:51:D5:3E:72:13:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2daf90-9c17-44c6-8082-3450f0d7afdd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2daf90-9c17-44c6-8082-3450f0d7afdd/1/sKv_-IXKVLslJjgPclBR1T5yE8A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.192.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d7:23:c1:60:df:25:74:8f:0a:ff:fb:98:62:42:d7:af:05:
0e:52:7f:bf:01:94:0b:d0:e2:f4:ed:4a:07:ff:a6:0d:85:c7:
1b:46:34:e0:eb:55:83:8a:40:66:40:90:44:42:d5:e6:03:7d:
52:fd:f1:19:b2:fa:15:9e:16:4a:e3:ea:fd:8c:c6:c7:8b:45:
d8:c8:eb:d8:31:ac:b4:52:6c:e1:4d:e8:7d:09:e7:78:89:7c:
2c:42:8f:84:90:b4:f3:ad:a3:cd:a9:3a:8e:12:5c:9c:28:b3:
26:bd:f7:e7:d2:b0:c9:43:a6:8f:df:96:16:b8:55:7b:c1:4a:
e5:49:b8:ca:05:8e:42:37:f9:b7:a5:aa:f3:4a:8d:0c:c1:11:
e3:a6:df:76:83:16:50:98:a4:01:a8:3e:23:b3:d1:fd:1a:ae:
83:fe:c3:d7:ce:82:11:92:f7:39:06:42:7a:e2:80:5f:bc:8e:
9c:de:c8:25:b6:ea:46:ae:60:e0:9a:a6:4c:53:f3:66:1b:01:
63:69:7e:c7:ec:e5:30:9f:e7:7b:5c:ba:d7:6b:8a:44:9d:23:
a9:4b:af:c6:27:76:e7:8e:10:2c:49:b4:3a:56:27:dc:b6:31:
12:72:a2:2c:18:22:f1:a5:3f:bd:a1:24:7a:c8:a0:25:5c:ec:
e6:b0:56:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:02:01 2024 by rpki-client on console-fra.rpki-client.org