Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
File: 0i870LrmA6t5BgKpa7vEK1Mi6I8.cer (raw, json)
Hash identifier: zr9LeU9cSuCJtOtwnQjOKwBs1SD+Fxux5vSoPqw5lRo=
Subject key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E257E94E4C4881E802C88AB1C83A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.38.4.0/22
IP: 2a09:1a80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:25:7e:94:e4:c4:88:1e:80:2c:88:ab:1c:83:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:44:0b:96:fc:2e:f7:7f:97:11:fa:78:31:
7a:2a:cf:55:40:ce:b5:a3:e5:0a:00:7d:94:ca:60:
27:35:91:50:5c:20:9e:aa:66:7f:09:b3:1f:26:34:
e7:b0:1f:83:de:6c:ed:f9:97:71:d1:9b:a6:82:bc:
b8:4e:02:90:7e:76:81:7c:54:23:a0:24:25:88:b7:
16:f2:fa:ab:5b:d6:41:09:9b:70:5a:a3:bd:cd:f6:
b6:6d:83:aa:24:e8:51:a9:84:32:d5:53:4e:cd:c0:
e2:35:85:c5:a8:d8:9b:86:d7:c3:98:4e:11:4c:e5:
29:eb:3a:cd:65:6b:7c:6d:5a:36:95:2d:b0:50:22:
cf:e9:91:98:7f:65:21:a2:46:08:7a:3a:2d:ef:11:
28:8c:9a:30:ca:ac:70:00:58:96:e8:23:3b:d8:23:
84:fc:7f:39:63:2a:ce:30:df:38:d0:fc:3d:dc:ed:
d8:15:21:83:fa:ec:4b:ca:6f:57:f0:62:0c:4e:e8:
52:24:87:4b:a8:20:ec:6e:05:39:04:51:a3:d3:63:
9c:09:3a:2c:df:bb:aa:7b:d0:b9:24:d9:d4:d4:68:
4c:e0:41:1d:f1:00:dc:cc:ac:e6:45:4e:2c:49:fa:
90:20:62:5e:75:49:9f:10:5d:79:1f:31:a5:18:ba:
1b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.4.0/22
IPv6:
2a09:1a80::/29
Signature Algorithm: sha256WithRSAEncryption
6b:de:2a:02:9e:3d:ba:c8:84:a5:dd:40:f9:87:55:4b:de:65:
f5:68:9d:a4:90:ff:a9:ca:f6:1d:86:ac:3d:b4:ab:ba:e5:f3:
58:45:cc:86:42:0e:a6:df:37:e4:a7:c6:34:55:cb:e0:cc:89:
08:54:90:a1:31:88:bd:5c:38:44:54:bd:d5:4d:1a:15:e7:8a:
84:f9:fe:fe:d8:e2:d1:16:57:15:ad:cb:d9:29:40:bf:88:9b:
83:ab:0b:cf:99:05:44:7b:b5:6b:22:b3:6d:24:68:63:e7:e3:
e9:49:f1:43:18:4e:71:7e:79:d3:3f:8a:8a:58:ed:c8:44:2e:
28:5f:14:bb:1d:e9:cf:64:42:ec:d7:87:3f:96:51:57:74:bb:
d6:5b:47:70:cd:db:52:36:85:fd:d4:ca:3f:e4:69:fb:c2:3e:
87:c5:60:86:55:eb:9a:73:9f:07:61:dc:b4:3c:0b:13:b3:4d:
36:1b:06:3a:cb:24:b9:b9:8c:7d:90:22:18:93:cd:fc:dc:64:
9c:c6:ae:d7:10:0f:62:41:7f:93:f9:88:a7:d0:1d:87:b6:43:
54:81:86:99:ef:00:ee:19:57:03:31:ba:bb:55:4f:57:31:19:
99:aa:be:06:c5:fc:db:10:0e:ad:36:70:c2:2c:cc:58:8d:2a:
38:58:ac:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:17:46 2024 by rpki-client on console-ams.rpki-client.org