Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
File: ToWU69x9fPfaLgA8hNhqfBr4cbw.cer (raw, json)
Hash identifier: YNV5F0SEUYiyCfitevr572dJ+Is6zqxYOom3dedMlAQ=
Subject key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F59B9C34A867843006554BA354FFA41E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 08 May 2024 19:41:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.155.72.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:59:b9:c3:4a:86:78:43:00:65:54:ba:35:4f:fa:41:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 8 19:41:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:0f:66:29:b0:fa:02:93:5c:86:74:b4:de:
a7:1c:10:d7:c5:1b:64:c0:94:f0:2e:8c:6e:2e:12:
d3:1f:51:4a:50:9d:3b:85:f6:81:2d:27:ae:97:df:
95:c4:5f:29:cb:77:ab:ec:02:8b:d6:39:cf:ef:fc:
71:80:51:16:e1:7f:07:95:7d:46:41:2e:1a:13:78:
07:92:b0:c8:fc:4b:95:25:59:95:d5:ad:1e:08:85:
e8:5f:b8:c0:f6:9e:57:ad:ec:09:1b:34:44:3a:e4:
25:71:38:dc:82:72:85:fa:ba:2a:9b:8b:a7:d2:50:
7d:56:5c:ee:3e:0c:8a:5f:61:b9:17:6f:ac:27:0a:
04:e6:92:06:ea:c0:04:58:c4:bf:16:e3:36:e4:bb:
24:40:d1:ac:c4:37:df:f8:c6:cb:a4:d9:fd:4c:0b:
e3:46:81:52:2d:d8:54:24:39:9c:11:44:3d:21:41:
5d:b9:97:c6:06:f3:4a:1f:ad:22:01:18:94:29:57:
36:06:77:72:11:f6:85:e4:a1:f7:28:e5:d6:83:c9:
af:ce:48:4f:6d:d0:2a:56:9e:d0:f9:cc:1b:83:9b:
01:b6:fe:37:92:32:cf:99:6b:48:cf:25:b9:70:4b:
a3:9e:6a:b3:af:74:ba:3e:37:ff:54:0f:de:46:be:
11:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.72.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:eb:05:eb:0d:70:29:95:08:15:c1:8c:26:a4:10:7b:7e:89:
64:d5:12:d3:5a:bc:5d:02:9a:05:ac:6d:1e:c0:5a:54:22:63:
e0:63:5d:a4:86:7d:df:be:df:00:b6:cd:7d:bd:43:93:a9:d3:
3c:74:01:82:a7:06:bd:81:8b:57:27:70:5f:5f:d9:3a:c8:ce:
ae:6e:d1:c6:47:aa:ea:e8:66:cd:a1:da:30:29:00:a8:9f:ce:
dc:7c:15:b7:e0:2a:41:92:a8:f6:ff:d6:d7:6c:30:d2:06:28:
d6:e6:25:16:ab:01:ad:67:fa:62:aa:8d:06:03:7a:97:cf:13:
52:2b:53:1c:26:3d:38:78:cb:76:c1:0c:7e:47:a7:69:ee:b0:
45:a5:86:95:71:e3:1b:f7:3c:33:03:12:ba:b9:97:5d:a8:29:
03:7c:5d:9d:21:62:83:94:d3:6a:1b:f3:72:e0:fe:79:04:fd:
1a:03:0c:63:71:94:3a:ee:4c:b6:60:3d:21:05:48:1d:78:7a:
2f:31:33:4a:fc:2f:c9:74:ce:ac:81:1e:a6:87:02:77:15:eb:
1f:40:20:1b:7b:65:20:98:67:1e:88:8a:b0:4b:ff:78:b1:39:
a1:ff:4b:86:8e:72:ce:5a:d8:fa:7e:56:22:97:48:7f:b2:20:
f8:c6:a5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 03:24:35 2024 by rpki-client on console-fra.rpki-client.org