Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
File: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer (raw, json)
Hash identifier: T5psjtRES6mPf8vsWnv9aDmHr4uYGXnkib3PvqVEzwo=
Subject key identifier: D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EF7116998271B9529ECD1E430FA38
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.208.252.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f7:11:69:98:27:1b:95:29:ec:d1:e4:30:fa:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d70af942465ff265b896f0d1b762490f27dc322c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:a3:80:3d:69:89:55:65:2c:4d:2d:5e:f7:
b2:13:31:33:18:55:0c:84:b5:33:3c:eb:47:d4:33:
2f:b6:9b:73:cb:bc:99:dc:91:0b:70:62:6a:f1:36:
e1:d6:1c:01:b1:07:db:82:3e:06:56:00:82:8e:47:
30:af:8e:a9:33:3d:cb:e0:13:7e:01:ff:e8:d6:6e:
45:c9:6e:12:35:de:8f:ce:07:ab:61:0e:be:8e:3a:
29:0e:f0:26:dc:1c:74:94:7d:e5:5c:42:e0:ca:03:
43:00:47:3d:a8:c3:59:a9:12:18:f7:b3:b3:a9:d0:
0b:72:db:91:1e:d8:11:7f:f5:99:9d:6a:cb:88:6c:
6b:fd:7b:d4:e3:b0:11:cf:13:4f:e7:f3:28:54:02:
05:a6:f9:f5:d6:0d:7e:ef:e5:a8:da:ee:ee:85:65:
df:d5:a3:21:ce:00:af:b3:6f:2f:8b:b8:b2:6f:ab:
9c:a4:16:15:c5:d3:e0:d0:7b:39:d4:16:28:6c:13:
be:08:d9:51:b8:1a:af:53:bb:d9:37:53:75:fb:82:
9a:3a:a4:cc:10:e1:a4:8e:ae:76:e6:18:d0:78:6d:
6c:ec:a5:15:10:ca:6a:f5:91:37:12:c8:2b:82:d1:
ec:d6:6e:f1:a4:f1:22:84:47:6b:a1:49:d4:8d:40:
fb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.252.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:07:78:d2:e5:3d:e7:6d:f1:f3:72:97:bf:3a:56:d5:fe:51:
fb:b9:3d:34:f8:e9:75:a4:cf:a4:3a:ed:72:f1:b9:f0:a4:70:
b1:42:07:7d:6e:ce:24:c5:c4:9c:5e:ac:39:93:20:da:34:95:
52:89:f0:ed:3e:83:9c:f9:64:a3:05:c5:c0:e7:07:15:ed:a3:
41:8a:ec:e4:d7:c6:78:62:9a:cc:1b:7c:b1:e4:da:54:90:2d:
79:86:00:65:45:9d:8e:44:81:bb:d6:3c:72:cb:92:a7:31:1f:
d4:43:30:77:d7:03:3b:fb:9f:92:6f:ee:bb:5c:d8:15:74:ac:
59:78:c8:16:45:e7:5e:dc:fe:df:ac:70:c4:ab:ea:cb:4a:a1:
54:64:e7:fc:11:10:af:ca:eb:33:07:6e:e1:21:be:3e:ce:5d:
7f:cb:55:5a:89:a8:63:65:61:f3:4e:26:ce:c0:4c:cf:a3:d0:
64:0a:c3:b0:b9:e7:cd:9b:57:77:da:73:83:a4:26:70:16:df:
8e:ee:69:d3:93:44:cd:4c:15:70:86:80:db:77:81:b3:5a:de:
b7:f5:ec:c4:a1:14:e2:8f:e4:08:61:c8:2f:7a:b6:17:05:d3:
75:0b:59:27:26:d1:95:39:27:6a:77:e2:31:1d:7f:27:a6:cd:
5c:c7:d7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 19:58:08 2024 by rpki-client on console-fra.rpki-client.org