Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
File: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer (raw, json)
Hash identifier: OzxTINOU6z0b1e20Uc5AUNnRhZnoJV6YV7ueoHUgtz0=
Subject key identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A60081F914ECFA37863F9AF9D3E83
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.228.36.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:60:08:1f:91:4e:cf:a3:78:63:f9:af:9d:3e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:79:1a:c1:9b:2e:a1:5c:09:21:9e:ef:5c:
1a:94:c5:6d:68:19:1d:a2:fb:6f:a1:eb:4c:77:e3:
21:17:9c:51:d0:bb:18:c1:ba:b4:52:d9:93:15:b2:
93:12:d5:09:b1:8f:08:26:51:84:73:f8:53:bc:68:
2b:dc:6a:a3:fc:23:c5:c6:ff:ad:d8:5c:02:43:45:
d4:0f:2d:8f:0f:a7:a0:18:57:7d:44:d4:74:83:6d:
d9:30:4e:6d:df:8e:e3:74:85:a5:fe:a4:ee:f5:c3:
1b:35:0f:29:f3:18:94:5b:d1:8a:eb:be:77:82:50:
8c:9a:20:0f:c5:62:50:52:7e:77:0f:2a:d2:0d:8e:
41:88:0e:cb:67:74:d9:9a:05:d5:59:a8:0f:ab:5b:
01:8a:ef:91:1c:85:d5:3f:39:3a:0f:cb:ba:a1:7f:
90:32:7f:f6:20:88:50:b1:78:e2:11:de:1a:58:47:
6e:dd:74:ef:82:f4:2f:b0:a7:a5:d7:4c:36:5e:0d:
c6:9b:d3:fd:5b:5a:60:a9:0a:a2:26:74:72:4f:9c:
d5:d8:e7:1b:d2:af:54:4a:54:dc:10:b5:45:01:b4:
3b:c1:3a:5d:9b:be:e4:48:ec:65:bc:73:cf:75:1b:
e0:17:45:a5:1d:76:08:cb:88:11:a8:09:b7:60:1e:
ad:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.36.0/22
Signature Algorithm: sha256WithRSAEncryption
23:16:65:a1:f1:c2:2c:2c:55:14:7d:b1:2b:09:f4:8d:d0:46:
86:44:6c:98:4c:3d:e2:d9:06:ee:fc:61:17:58:b9:8a:68:fe:
cd:d9:e6:6d:50:a1:a6:93:4d:81:4e:88:73:d9:36:7a:6b:61:
8c:d2:ef:7f:a7:df:20:a3:bc:19:64:f9:81:21:ef:d1:2c:16:
9c:f5:b2:08:24:8c:b3:93:c7:9b:73:5b:7e:ed:2f:28:d5:1d:
d3:80:cb:86:d9:08:92:8d:bf:79:d1:08:37:2c:6d:31:61:ad:
fb:5e:c1:7e:5d:f8:5a:54:95:9a:e6:8e:81:62:f2:8d:d6:c5:
95:71:3a:1a:43:43:1f:8d:e4:9d:41:63:7b:c6:af:32:13:b1:
db:80:bf:1c:1c:05:92:61:59:1d:04:f6:d1:32:4e:72:f9:35:
24:99:f4:6e:5b:50:7e:cd:d0:b7:cf:34:3b:f3:25:1b:20:bf:
69:2e:fd:d6:39:b0:e7:28:75:06:b3:2f:94:8c:97:36:57:33:
72:2c:91:af:d4:77:f2:53:b9:98:72:4a:24:72:02:47:d4:79:
cc:ea:12:26:31:fd:98:41:c9:57:9b:35:f1:1b:24:4e:2b:0e:
f5:85:c2:35:d4:c4:77:9f:7b:f0:2c:c7:fa:db:ca:a8:73:f0:
61:c2:4c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 04:11:14 2024 by rpki-client on console-ams.rpki-client.org