Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
File: 7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer (raw, json)
Hash identifier: r+2Lt9025DyvwIfYXA4EXbkOEyW/DCGQ9CoH30xuU5c=
Subject key identifier: ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42487CC75DD0CD87615652B25A3379C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.8.50.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:87:cc:75:dd:0c:d8:76:15:65:2b:25:a3:37:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:c0:a1:8d:44:ac:dc:f0:dd:34:d5:b1:af:
19:2b:a3:5a:e5:4c:ff:09:66:60:34:51:29:23:f9:
c6:3c:1d:92:b6:71:31:07:d7:d4:b0:c8:4d:77:de:
14:70:61:69:bb:b9:69:6e:5c:40:44:da:6f:41:ac:
6e:9d:76:37:d9:11:aa:31:df:d2:2d:1e:27:70:37:
72:81:5e:92:be:32:73:9e:ee:bb:65:d2:86:b3:f1:
83:a9:7a:0c:9b:75:9a:79:b3:fb:19:6f:b2:0e:58:
d2:61:77:0d:39:1a:b8:31:b8:9b:a2:7d:21:5a:ae:
2f:d2:a6:30:f6:ed:51:24:ec:a5:73:8e:bf:20:56:
e0:aa:c4:29:57:f5:b2:14:f6:c3:b0:37:54:b6:02:
35:4d:88:7a:4a:51:fc:1d:94:e3:74:b5:f5:27:85:
0f:98:b2:6a:36:8d:bf:87:e6:84:29:43:61:51:19:
13:bf:31:a4:4a:77:dd:3c:c9:f4:4d:d7:99:34:20:
cd:54:7f:f8:fb:b0:17:49:98:00:22:86:d8:b4:0b:
34:b3:31:46:77:db:94:ce:df:d4:bf:49:e9:0d:48:
86:86:9f:2b:cf:1f:f6:c1:20:9f:7a:94:f5:61:43:
a8:fe:d2:72:86:9d:e4:df:d7:87:29:a9:ca:9c:a9:
3d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.50.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ef:03:20:c2:23:53:0c:e2:1e:74:05:20:8f:c4:18:ea:57:
ca:35:c6:31:98:52:0d:f1:4e:82:cd:4b:ef:6b:37:44:57:95:
1a:01:67:9d:af:ce:c8:fe:37:fb:bc:7d:eb:fa:cf:12:f7:02:
2a:6d:ad:4b:d4:ff:69:5d:57:16:00:24:e0:4d:12:b5:79:d0:
8b:ec:8c:7a:30:30:c0:fc:b7:63:f2:57:e5:91:d3:be:a0:f9:
9a:1c:06:db:ed:24:15:d0:0d:3d:78:f2:17:e2:04:74:6d:01:
e1:68:f6:80:4e:62:a0:9c:71:0b:02:3b:a4:ae:cb:44:4c:90:
e9:8b:ba:2e:c6:3e:30:9c:dd:33:cf:51:9b:e3:8f:93:5c:30:
8b:24:9f:73:b6:76:ce:85:9c:8a:82:7b:bd:b0:06:23:fe:31:
81:2a:85:9a:fd:61:1c:e7:1f:62:41:f7:81:7a:d5:a9:51:a8:
f0:3e:ae:74:6f:04:ee:bf:25:46:bb:ed:e6:2e:60:51:13:c9:
70:5c:d6:31:dc:62:ed:96:84:ee:7b:7c:ff:3b:cb:84:50:e5:
64:a2:cf:37:ca:f8:c4:c2:5d:88:50:f6:7b:3c:0a:7c:46:4f:
71:33:aa:26:c5:e3:67:04:cc:a8:32:05:ba:4e:84:1c:82:f8:
f1:b5:36:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:03:44 2024 by rpki-client on console-ams.rpki-client.org