Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
File: uqrQjzbPvAAFOl7j1au3oxF8P4o.cer (raw, json)
Hash identifier: pTh8ccN0GVgYTzJ4ujFSl9lUPwdkmU56v5CGvDReGPI=
Subject key identifier: BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424496A02F35C6946E2BA06199C6CE3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.78.50.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:49:6a:02:f3:5c:69:46:e2:ba:06:19:9c:6c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:33:b9:9c:aa:ff:44:2b:78:3c:50:32:38:
20:bc:b7:24:01:bc:e6:4d:d3:22:44:da:8f:40:93:
2e:30:fe:c8:7f:05:c4:cc:d5:ad:a0:53:75:c9:dc:
59:37:66:08:93:77:ab:78:e8:32:64:b6:b8:37:c0:
9a:69:12:b7:7b:1f:7b:56:a2:65:45:9a:b4:94:4d:
7f:22:d2:d3:ba:bf:f5:5e:c4:a0:cc:6e:20:d6:68:
9c:59:16:57:c5:fa:94:ae:5e:ee:01:1a:a9:09:b4:
c7:80:29:9b:a3:3e:52:81:94:c3:03:fe:f0:6d:fb:
76:43:7f:f2:eb:2e:d6:9d:4e:bd:dd:eb:9d:8b:da:
ec:d2:c8:24:4b:e1:22:98:8d:da:4b:8f:e8:52:42:
8e:f9:02:e0:91:ee:ba:2b:ae:71:48:61:b0:3e:4d:
71:17:c9:05:f4:e5:c3:6f:3f:25:31:2e:4f:60:0d:
eb:d8:94:11:01:79:32:05:c5:cc:2e:be:25:c4:71:
13:48:70:e5:cd:a5:78:38:d7:d2:73:63:c1:ac:1b:
ea:a5:da:eb:e4:d3:df:ba:72:c7:d9:93:24:29:b8:
c5:16:9c:64:b4:1c:5f:b7:05:31:27:b7:18:7a:fc:
9f:8f:b8:82:83:46:f1:cb:c1:2f:02:aa:1b:3b:af:
0e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.78.50.0/23
Signature Algorithm: sha256WithRSAEncryption
51:ed:ec:97:35:0e:e6:90:39:05:df:9f:c6:3d:8d:78:8e:91:
27:b9:5a:b3:bb:bc:9a:65:54:43:4e:70:90:97:23:2a:93:15:
88:f6:e1:cb:ae:56:b2:8c:25:a7:09:24:8d:2e:f5:33:88:62:
dd:45:d7:bb:35:bc:e1:cc:d0:e6:a9:b4:d6:8f:08:c9:42:d6:
db:6f:c8:41:bf:50:83:e4:72:0d:ea:aa:31:ee:8c:9a:62:8b:
2b:29:8e:88:82:02:33:b5:d3:d3:ba:3b:5e:d3:53:f1:42:5a:
51:15:bf:61:05:a4:9d:5d:91:5c:06:e4:8d:ca:d9:ab:54:f1:
b1:a8:67:5f:f5:c6:4e:87:ba:22:29:08:68:b6:74:e6:72:f9:
dd:af:2f:58:d2:6e:35:15:a2:35:a7:42:fd:a3:a0:c3:b1:c2:
9a:d5:10:02:74:68:04:21:8f:f8:94:34:0d:db:88:1a:8f:ee:
55:7f:ab:c2:b1:b9:7b:02:33:4c:33:4d:5c:d5:2b:b7:8c:ea:
e0:ff:48:b2:5a:49:04:81:48:51:17:04:69:76:f1:f3:34:ac:
11:2b:b3:2b:fa:7c:33:dd:ba:a2:10:d3:f9:6f:4a:c8:0a:be:
f8:05:f6:7b:be:fe:c1:b0:7e:6f:6d:55:1d:d0:6f:33:53:ca:
9c:e3:db:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:23:45 2024 by rpki-client on console-fra.rpki-client.org