Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
File: uo1nmL3QsriAXUOzRV92c5uUbx0.cer (raw, json)
Hash identifier: QdDZZLq+UVrgjtT3D9eWh0AOH0wnfjyRtOhV9Uz6fKA=
Subject key identifier: BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801F57A6BB657A9452C042812049D28
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 192.42.114.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:f5:7a:6b:b6:57:a9:45:2c:04:28:12:04:9d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6d:7a:53:b9:de:62:38:53:ab:f6:b5:0f:21:
ce:79:2e:cd:9b:ce:1b:cc:34:46:ae:46:cd:4e:e2:
97:d0:da:e7:60:c4:c1:c0:7a:bd:ba:0c:4a:b3:18:
df:3b:ed:98:b9:4d:85:4f:7e:5f:1a:44:36:87:83:
b6:78:66:9c:66:72:e5:8c:e5:e7:24:7e:59:8c:ab:
24:5b:6d:1a:3c:4b:a8:e2:ab:d8:93:fa:36:1f:ac:
25:10:04:e4:59:f0:be:7c:19:22:f3:63:26:79:21:
c4:de:7a:67:6c:f9:b3:a0:51:7e:77:8e:9a:8f:5e:
63:2f:aa:9f:02:97:88:91:1b:fb:40:48:e6:c3:44:
33:c1:f4:33:28:22:ac:e2:ba:10:8f:89:9c:5d:c7:
11:07:6a:19:64:77:d1:ba:64:94:e4:39:46:35:9d:
9f:3c:8a:6a:b2:d8:a4:3f:ec:91:75:7e:f7:27:ef:
3c:29:25:eb:49:6e:92:5d:b8:94:c5:25:21:95:a0:
fb:d7:70:d7:29:9e:a1:f7:84:64:98:29:7b:c9:89:
5e:26:b3:01:ba:5e:3e:e6:a1:52:88:8d:8c:d0:8b:
20:9e:b5:a4:b7:da:94:c0:d5:08:18:38:19:77:8c:
3d:58:5a:1c:ed:d2:1c:e2:79:09:44:0d:0e:c9:ff:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.42.114.0/24
Signature Algorithm: sha256WithRSAEncryption
64:11:2a:d4:42:10:cc:9a:a2:bc:d4:48:26:99:b8:9a:5f:75:
3e:35:d8:08:e5:bc:36:74:bb:6f:3c:56:4a:22:ac:6d:df:53:
49:cd:97:a8:86:26:ff:e4:ce:d1:f1:1e:ce:c7:1c:6e:11:ce:
2c:dc:e9:82:1c:7a:7b:1e:df:2f:66:4d:05:9b:c3:b9:88:15:
f2:e1:b2:78:18:3b:57:4e:5e:84:0a:7f:b9:aa:b4:67:b0:c9:
83:a3:dd:ce:11:23:ec:bf:79:27:df:70:c2:ca:1a:f0:94:e5:
1e:72:35:f4:66:08:67:02:57:d6:24:0c:0d:eb:68:8c:04:32:
7b:c7:b8:cc:3c:72:b0:76:03:f6:db:64:6c:a7:4d:f6:6b:b6:
7f:95:7c:b2:b5:e1:e3:9c:55:7b:fd:b3:7d:fc:20:f0:96:54:
5b:13:8d:00:ff:c6:a9:25:a7:90:83:f8:2e:4e:55:0e:6b:c2:
a0:de:75:b0:b4:4a:19:89:ce:b1:57:ff:d6:d9:dd:0d:4d:ba:
95:42:1b:f4:22:1f:ff:de:77:31:88:f9:31:1b:1d:43:2e:6d:
08:42:fe:c8:3b:4a:27:2e:b6:5f:44:0b:f8:7f:7d:81:16:84:
d4:05:ec:fd:a8:56:68:55:d0:4d:82:17:4e:8b:1b:69:2c:4e:
e2:6a:6b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:04:22 2024 by rpki-client on console-fra.rpki-client.org