Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.cer (raw, json)
Hash identifier: QQo8/4wAQEl/2T6qTPUtW1dbfvvoofTTCxukHS6Lhvc=
Subject key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01909DD0C9219862D8273C6E36B9199999D3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Jul 2024 18:03:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.88.236.0/22
IP: 2a07:c780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9d:d0:c9:21:98:62:d8:27:3c:6e:36:b9:19:99:99:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 10 18:03:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:4b:d9:f3:66:84:15:91:1a:ef:0f:6f:63:
e7:c2:e5:ec:c6:bb:e7:9c:d2:03:80:d1:39:34:a6:
2f:c6:bc:b8:78:41:4d:eb:9c:4e:5e:13:56:03:98:
04:64:e2:a9:4a:67:e8:c2:25:99:32:2b:c3:c4:2f:
51:be:03:07:a5:60:71:cd:25:4d:0c:ea:75:4c:f7:
50:a2:80:73:4f:d8:df:27:2f:fc:56:d1:51:94:f0:
48:ad:bf:d0:f1:05:86:25:78:b0:b8:a8:06:1b:38:
ec:2a:51:2b:35:82:53:d9:fb:61:f7:7c:c4:8b:30:
73:f7:17:15:8c:38:81:a0:0b:8d:7f:bb:12:89:5b:
5e:66:2c:72:3c:30:95:79:13:ae:3a:09:54:ad:a5:
e4:df:8f:5b:75:14:dc:85:3f:20:23:54:e5:c6:19:
9f:de:14:1e:40:2f:47:77:21:db:31:77:9a:a4:c9:
04:2b:a2:b6:c0:62:a1:6e:eb:db:ec:95:3a:50:1f:
09:df:e2:1b:b1:8a:b5:26:a5:a0:86:ab:99:9f:91:
34:ab:b2:b5:c7:f5:70:90:a9:f3:73:d5:ea:ad:61:
a6:07:35:63:0e:49:26:e9:34:2e:dd:e4:00:dd:db:
d9:6b:05:ab:98:63:24:87:91:96:fd:d0:0f:ff:d8:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.236.0/22
IPv6:
2a07:c780::/29
Signature Algorithm: sha256WithRSAEncryption
72:69:ef:47:d0:47:96:bc:c0:05:03:dd:3f:d8:77:9d:8c:ec:
18:84:a2:e6:0d:9f:60:1c:d8:a2:95:95:97:fc:b5:83:86:41:
5e:8b:4c:a8:7a:28:09:a4:3d:5a:a3:e1:71:3a:43:b2:c2:28:
1c:60:25:d8:4d:d7:66:d5:f2:cc:4f:58:7e:22:6a:0b:dc:4f:
e7:7d:d2:c1:2f:bc:51:72:ab:9d:3e:68:93:e9:03:19:88:1e:
4f:90:91:e0:db:e7:c3:34:7f:f6:27:76:32:3b:39:e4:73:d2:
30:d7:e5:50:35:39:86:ca:21:3f:88:d2:f1:e2:87:f8:69:10:
aa:5f:76:f9:ef:74:a9:cf:4f:c3:57:2a:2b:49:c0:3c:19:39:
8c:6c:b2:5f:fa:10:7d:d1:07:50:2e:73:3e:ac:a2:e8:e0:3e:
d5:7a:b2:12:93:c1:99:c7:72:7d:36:48:c8:97:1b:48:e0:60:
ac:5f:74:89:17:ed:d2:b2:96:5c:ce:41:b7:15:f7:e7:0b:56:
22:fc:dc:59:44:e9:9b:ad:3a:6e:12:1e:6c:47:10:79:5c:c2:
95:b8:da:ce:24:18:58:ce:ad:85:62:c0:db:fb:b0:46:bf:35:
5f:36:21:25:a2:fd:cb:e3:b8:4c:23:cf:b9:7f:fa:bd:3d:bf:
e0:81:cb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:48:51 2024 by rpki-client on console-fra.rpki-client.org