Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
File: suwbpoVLv1vD7VVP9_7zul_ky1E.cer (raw, json)
Hash identifier: X0P8//vWjs1iliy2ByM0RwOR40vPbzBFsCYtqj8ZIZU=
Subject key identifier: B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8A7BD12591F202B1E83A4D9DD6166
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 80.84.192.0/19
IP: 185.48.208.0/22
IP: 2a04:a080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:a7:bd:12:59:1f:20:2b:1e:83:a4:d9:dd:61:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:71:42:54:19:98:06:8f:70:34:1d:9e:b7:a6:
41:34:05:25:72:a0:67:2d:50:bb:95:7c:3b:d3:bc:
95:c2:45:ce:70:77:24:62:65:5f:7b:fe:0c:09:21:
ea:1c:5a:29:f0:56:9e:c5:97:96:68:32:bc:07:19:
3f:49:55:c3:b4:f5:c3:75:13:0d:32:81:93:20:68:
f1:6b:d1:47:e5:a1:0a:7b:bb:e8:c3:ef:59:36:91:
e7:c0:1c:8e:28:5f:5a:e0:5d:3f:26:7f:6e:58:c5:
ef:e8:ef:f7:1e:57:fb:48:82:da:da:7b:36:68:5e:
19:56:31:1f:de:98:90:a6:e6:7f:66:07:b3:a3:b2:
43:27:b4:d8:6f:dc:7e:08:96:96:4f:2d:63:cc:57:
91:d1:33:b6:24:e8:d4:7e:e4:f5:c4:3e:f4:c2:37:
7e:94:6a:e6:4b:5a:eb:b5:c2:05:99:32:8b:3d:4f:
ed:8f:41:5e:da:06:c8:f4:5f:ba:3e:51:3f:33:57:
c8:20:bd:52:50:f5:50:17:dc:9b:9f:7e:d9:4e:c0:
9a:0d:f2:41:58:34:8e:ab:a4:33:3a:6d:bc:9a:27:
b3:4b:a0:00:cf:6a:83:03:32:80:85:8f:35:60:a4:
8d:b7:e3:eb:58:41:ae:6c:b0:0e:8b:f9:17:10:25:
71:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.192.0/19
185.48.208.0/22
IPv6:
2a04:a080::/29
Signature Algorithm: sha256WithRSAEncryption
1c:c3:6f:2a:50:30:af:dd:40:03:f4:b1:3c:09:2f:f0:a1:68:
fd:64:ab:27:c9:35:b8:a8:8b:b9:aa:7a:b4:81:ca:a8:87:7c:
dc:09:a2:2e:5e:cf:a4:9a:40:4e:08:cc:a9:2f:81:02:6f:13:
ac:a5:f3:ce:c4:58:d7:fc:48:c8:95:46:0e:83:25:d5:22:90:
2c:8a:19:f6:d2:04:a5:42:d9:89:2c:10:ec:5c:7c:ae:9c:b7:
0b:f7:26:2b:1d:bb:16:28:57:2d:f3:56:16:8d:83:56:16:51:
c1:6c:22:1b:bd:6b:0f:77:e6:9c:33:15:fa:0c:1a:dc:86:3a:
80:5c:6a:7a:5e:35:08:9e:82:d2:a9:a9:83:f1:65:d0:62:49:
72:8c:35:f5:07:0e:64:f8:7b:80:0f:e6:eb:39:3f:39:89:65:
a0:5e:c4:38:82:97:4f:29:8a:4f:92:40:69:b2:56:92:c6:0b:
8b:76:2c:23:1f:54:aa:9b:48:2e:af:88:62:ad:2c:b8:d4:40:
d8:30:65:ad:63:33:46:ea:bf:68:64:61:85:9c:ab:3f:ed:8a:
31:7e:2b:80:58:42:81:0d:4b:85:c8:9c:7a:aa:a6:6f:f4:f8:
b1:47:78:e3:c5:79:e2:32:ab:0c:b5:56:ac:d6:df:14:0a:25:
e9:8a:45:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:04:51 2024 by rpki-client on console-fra.rpki-client.org