Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
File: x9qC6HeTPZwslSyzdsk6qjN919I.cer (raw, json)
Hash identifier: PE+ok51hNq1KV1Ceo/L40BHkIaHpelE7mks8ej9b6D0=
Subject key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64A48AA2D6FBFDFC938E6A1F9B76DD2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.124.88.0/22
IP: 2a05:b080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:48:aa:2d:6f:bf:df:c9:38:e6:a1:f9:b7:6d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d3:49:a9:88:bc:dd:43:5a:e2:90:eb:1f:a7:
29:02:03:98:4a:f1:09:37:13:be:d3:a2:6e:ab:ba:
1f:98:b5:36:40:2b:1f:4a:7e:04:90:fb:4c:a5:42:
83:2d:98:10:13:3e:3c:6b:c3:80:c0:f5:e7:8c:b9:
fa:19:69:c7:8e:d4:e3:00:40:dc:cb:12:33:ac:6f:
f7:61:3e:8b:19:bc:fa:34:e3:bf:91:34:41:6c:05:
13:4b:93:c2:7c:8e:fa:f6:2c:d0:15:ac:4f:03:36:
5f:fa:42:4f:d1:cf:88:27:e9:41:60:be:40:e4:7c:
4e:96:21:39:f5:ea:62:b6:77:38:e1:f6:80:b5:ce:
37:35:b3:b2:38:60:f4:3b:0e:b4:d7:8f:a1:6f:49:
dd:16:90:02:ef:f7:f5:0e:78:b4:39:07:35:10:f3:
83:f0:7f:6b:a4:ff:be:c0:74:1f:2c:b9:5f:e0:1d:
b0:8e:3f:31:d5:b0:6c:b5:42:6d:35:10:24:4a:af:
88:95:b6:72:e6:56:00:f7:6b:c4:70:16:ed:96:c0:
7d:a9:93:f9:6b:97:4b:67:16:93:d6:82:fb:fd:27:
af:0d:93:3d:d3:dc:0e:9d:1b:d0:5d:9f:65:28:5e:
69:a9:3c:c6:bb:21:b2:36:a3:30:64:7c:33:a1:6a:
c6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.88.0/22
IPv6:
2a05:b080::/29
Signature Algorithm: sha256WithRSAEncryption
70:be:84:b8:f3:4b:cf:10:75:a5:30:04:04:d8:f5:00:31:cb:
c1:99:2e:45:56:b5:4f:bf:91:29:c6:1e:86:1b:37:09:81:7b:
c8:02:79:aa:06:7e:51:70:72:95:b2:bd:57:79:b3:b1:d3:ee:
1a:20:3a:8b:17:2f:79:dc:53:1d:60:d3:28:ad:a2:2b:29:85:
01:5b:a6:a6:2f:f0:04:df:2a:e8:75:54:52:5b:b2:29:3e:d9:
80:eb:56:96:8f:30:11:3c:18:1f:ff:e6:73:43:9a:57:c9:ee:
a8:78:e5:c3:40:2b:60:71:46:af:0a:22:36:e7:08:66:cc:07:
fa:e8:2a:84:83:1a:46:29:43:71:c4:a2:a9:b4:4b:4c:27:bf:
83:a5:1e:3d:01:06:52:89:ed:9a:c3:8e:0a:6c:af:d4:b9:85:
49:34:a9:b5:0d:0c:18:0e:7f:9e:15:b5:f6:f0:de:ca:a7:e3:
6d:c9:47:0b:58:a0:9d:05:a0:fb:04:67:bc:65:0c:0a:37:1a:
55:31:9e:bc:9b:93:21:56:49:ea:c9:ed:43:7e:13:f8:43:cd:
c3:ec:58:3f:3b:29:7f:12:89:2a:d5:e8:3f:0d:4b:df:2e:72:
d2:65:72:3e:3f:6b:35:af:5e:d9:90:7f:71:22:d3:27:57:6a:
4c:2a:10:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:42:08 2024 by rpki-client on console-ams.rpki-client.org