Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
File: 6TjNfs8jrBxJYlRuG89eCDrSKaU.cer (raw, json)
Hash identifier: MAr0qNnsYv4e5X2mR2sOupes9p1iy4ElZcsV8vercqU=
Subject key identifier: E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801819532D05961554120884593E894
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.22.64.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:81:95:32:d0:59:61:55:41:20:88:45:93:e8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:25:4a:ae:92:3d:15:1a:9a:9f:42:1d:8c:
c3:61:40:db:1f:2c:e6:c5:5e:4b:c9:0b:55:1d:d4:
17:e4:fe:5f:2b:68:96:5b:5b:5c:64:b7:0b:62:f8:
7c:c1:47:0e:c2:dc:be:39:f9:07:a6:2f:38:cb:49:
da:e9:17:64:3c:65:e3:00:76:64:e9:cf:93:26:25:
e0:56:f1:22:ea:e5:62:d5:58:9c:0a:6a:96:3e:5b:
8c:20:27:34:f1:9a:70:46:75:c2:9e:8b:e2:2c:fa:
83:78:14:34:53:b2:d5:9d:98:83:8e:b5:cb:03:e6:
20:ee:6b:ed:f0:a3:bd:69:f5:6e:47:9f:a2:86:59:
87:4b:7a:80:b1:73:2f:c3:2f:df:0a:e9:53:bb:18:
a9:09:2a:6f:ee:85:ad:72:59:24:68:9b:be:9b:48:
0e:75:02:f3:d6:cf:a0:a5:9f:2b:13:1d:a5:2f:72:
86:f1:23:78:3e:a6:3c:3c:38:76:1b:fe:41:a0:c7:
9e:ba:7b:d4:71:50:34:9a:c4:d2:16:70:05:c9:62:
4d:19:3a:92:0d:5a:1b:c8:9a:ba:b6:96:4d:40:e6:
dd:e9:78:40:20:6d:ce:9c:de:85:e4:d3:de:7e:7c:
59:8f:96:a3:de:5e:ed:39:db:71:ae:0e:93:71:d1:
6f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.64.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:6a:c6:cf:6a:41:e7:84:05:38:3f:3f:c8:ac:d7:5b:1a:91:
89:48:9d:7c:fb:ce:6e:88:61:1a:4c:46:b6:4c:27:cd:0b:d4:
30:a9:30:51:ed:ae:1d:a0:00:95:a3:17:7c:37:27:6e:a7:0d:
af:4d:1b:c3:9e:75:43:07:7a:4a:f3:cc:9d:f4:48:f6:ae:39:
3b:6e:a4:37:d1:e4:f8:56:28:9f:58:97:cb:96:4e:49:5d:43:
c3:de:cf:4b:84:5d:e3:b0:85:9d:80:1a:1e:53:2b:b1:4a:3a:
da:d4:32:aa:cc:4f:e0:13:82:70:86:55:92:2b:e3:06:af:b5:
6f:b8:45:83:f3:ca:dc:78:6e:44:3a:42:d1:f1:62:dc:18:18:
a9:38:0d:39:05:23:98:e2:2c:be:f6:d3:53:cb:9f:fe:d1:84:
b2:a9:c0:89:31:be:f5:2a:e6:f7:9e:bf:46:15:29:36:92:40:
5e:ab:a0:e2:77:07:e7:cf:7d:3f:e6:cc:22:6d:f4:fb:58:22:
6f:2d:29:25:8d:e5:e8:0a:ab:26:b9:61:4d:b2:e2:34:50:ab:
95:db:f7:b3:e3:54:87:ae:be:a5:c3:8d:08:a4:f7:5a:80:9d:
e5:13:25:ab:76:8a:e7:f6:ec:05:38:15:a7:e0:b3:cf:e6:1f:
19:a3:40:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:58:53 2024 by rpki-client on console-ams.rpki-client.org