Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
File: Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer (raw, json)
Hash identifier: FErOXOuU22NGHlgOFemjlBMKF+oNl6q/B4gYvIL20SA=
Subject key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FA0032E748FC889DE1D1C0CF4C2FB9EAD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 22 May 2024 11:15:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.140.228.0/22
IP: 2a14:54c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a0:03:2e:74:8f:c8:89:de:1d:1c:0c:f4:c2:fb:9e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 22 11:15:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:13:61:61:9c:80:0c:12:52:0d:98:90:d1:
6c:ad:6b:2c:12:72:51:ce:9a:f4:67:a9:09:dc:a2:
cd:e4:ae:36:14:42:77:d9:b1:55:f5:04:af:33:44:
3c:b2:e6:5d:20:21:7f:67:a6:97:af:52:32:b0:86:
ab:53:bb:91:5b:70:ac:cd:e2:a2:78:51:2b:cc:b8:
6a:82:ed:1a:56:86:1f:9e:c6:00:de:0f:36:d7:c8:
a6:16:f1:63:49:ab:3c:8a:74:e8:a0:3d:a1:29:e0:
c2:99:77:f5:28:c5:65:73:7c:15:c0:9b:0a:fc:6c:
1f:eb:54:7a:43:33:81:2b:37:a7:5a:27:af:45:3f:
16:b7:d8:61:29:ed:8e:60:34:5e:49:e6:50:9d:02:
92:6b:78:ac:ec:15:de:10:78:e6:ec:10:f9:7d:59:
12:6e:d2:c4:31:c1:82:4c:57:a4:36:72:bd:19:c3:
ea:32:f4:2a:11:64:28:79:46:f7:67:03:b1:cd:37:
ad:c0:d3:ac:aa:fc:49:89:89:e6:cf:0f:3b:16:27:
fd:ef:91:53:14:84:15:69:5c:e7:68:e7:4b:6c:58:
d9:87:6e:ae:27:d0:d1:4d:22:d8:ea:ba:87:61:3b:
96:4c:4e:d2:35:0e:30:4d:6c:ef:03:81:bb:3f:2f:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.228.0/22
IPv6:
2a14:54c0::/29
Signature Algorithm: sha256WithRSAEncryption
48:fd:7a:e6:9a:dd:86:8a:53:36:b4:5d:74:42:d8:2d:65:55:
21:a3:56:eb:b8:da:cf:e2:26:11:4a:2c:4a:1c:2e:58:fd:7e:
4a:d2:17:a3:bb:0b:4b:71:ac:fa:3f:ee:f5:9d:9e:70:d7:91:
11:1b:b6:4f:65:f8:17:7d:cd:a8:92:a4:32:06:3e:62:9a:5b:
ad:8a:3d:1b:e2:a8:be:92:8e:a9:c7:9e:d9:55:35:91:7b:9c:
df:ae:a8:98:55:b8:f5:fe:83:7a:93:05:d2:80:2b:16:89:8f:
87:db:50:85:7b:5d:7b:cb:76:90:0c:3b:34:b2:99:91:f3:22:
a9:b0:5f:3f:0d:e0:bb:62:1d:a6:0a:02:75:6d:eb:f4:9c:a2:
83:f7:07:d4:31:c4:17:9a:34:b2:5f:57:7d:0d:d7:f0:17:7a:
bb:7f:82:5a:d3:1c:59:04:de:5a:89:76:21:b3:48:47:2a:cd:
d1:ee:47:d9:af:3b:e1:9f:8e:89:60:9a:4a:e5:9d:d5:e2:90:
99:82:27:52:14:cf:f3:4a:0a:e6:31:75:b7:d5:75:12:ab:9b:
d5:81:a2:01:08:7a:0a:bc:a5:de:21:a0:96:2b:47:db:9d:bd:
e1:a8:18:f6:31:4a:6e:92:8a:fb:5e:58:60:96:f0:65:0f:55:
2f:65:f6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:22:26 2024 by rpki-client on console-fra.rpki-client.org