Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Y75BBRwJqzU6d94kpIZas4yisI.cer
File: 1-Y75BBRwJqzU6d94kpIZas4yisI.cer (raw, json)
Hash identifier: b7dJr9LBCneQ2aKv3DgCqGX0qSv8o4eszZQYq5gjcqs=
Subject key identifier: F9:8E:F9:04:14:70:26:AC:D4:E9:DF:78:92:92:19:6A:CE:32:8A:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500E9C95AA901DFE3EFF92A592E54CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/1-Y75BBRwJqzU6d94kpIZas4yisI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.93.112.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:e9:c9:5a:a9:01:df:e3:ef:f9:2a:59:2e:54:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f98ef904147026acd4e9df789292196ace328ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:e6:ba:ec:d3:c7:d2:44:20:74:f2:d8:18:
1e:17:93:ec:32:03:26:be:00:34:fe:98:da:d5:61:
9b:ba:09:f4:71:ff:59:63:5c:e5:16:e2:88:d4:24:
ac:8a:78:d7:da:6d:c5:46:9c:1f:79:46:ca:90:fa:
a2:5d:9c:11:29:95:c5:fc:53:8f:e2:d6:72:cb:2e:
d2:f2:26:77:c4:0f:1e:a5:d1:a8:32:7d:64:50:73:
6f:e9:78:b4:e7:ae:4b:ba:a2:26:e3:45:7c:c8:e5:
26:7b:a3:78:ff:d4:7a:7c:d0:c8:40:7f:85:1f:d1:
e8:4a:92:60:0d:42:1c:fb:6d:ae:62:cf:92:90:22:
d0:ee:df:ad:6d:45:42:db:ee:2a:82:de:9d:ec:96:
a2:d8:45:c6:9b:ec:c8:df:2c:9f:56:6e:d2:a2:fe:
04:49:0a:de:db:8c:71:c4:97:16:50:00:41:ff:7f:
47:e4:a3:44:78:a6:2a:f1:74:2b:c1:f5:e4:fb:f2:
e2:f9:5c:d5:6a:96:9c:a3:ad:ed:19:0e:ed:98:48:
5b:2f:6b:b7:6f:be:7a:c0:ee:4d:c5:fb:64:f8:0b:
05:a4:25:d6:c5:0d:9f:d8:23:2d:f4:ca:94:19:22:
73:f6:3f:29:74:77:5e:3b:d4:23:9f:fd:41:42:8b:
71:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8E:F9:04:14:70:26:AC:D4:E9:DF:78:92:92:19:6A:CE:32:8A:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/1-Y75BBRwJqzU6d94kpIZas4yisI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.112.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:ab:c5:04:be:fd:eb:ec:c2:e1:2b:6e:77:29:6e:92:63:b2:
a3:d5:27:56:40:34:ea:5b:9e:ae:b0:d8:6c:c9:32:a8:a1:5b:
30:2c:51:2a:3b:1b:58:e9:75:6b:91:02:1e:8e:d4:f6:9c:61:
13:27:23:3b:d8:9d:37:74:38:3f:fc:44:fb:dc:5d:38:1c:e4:
c4:22:73:96:4b:74:a4:ea:64:f2:0d:c8:0c:b7:98:9c:c0:d6:
b6:ef:62:76:b1:2d:65:94:97:a6:bd:9f:bf:58:78:c7:84:90:
39:2a:03:79:de:1e:ab:7e:ef:ce:9f:b9:89:dd:a5:e8:ba:0d:
e0:56:21:d6:0a:54:33:43:68:54:c6:b4:35:35:dc:7d:c9:36:
41:9a:33:d8:20:5c:8d:c9:6e:ae:78:da:f9:c4:ae:69:12:1d:
8d:c5:2f:ae:a9:0d:78:d4:cf:34:7a:9a:29:62:97:c9:c6:54:
83:d5:82:fd:5d:8b:90:96:09:36:1b:ef:c7:ea:09:33:c9:6a:
4f:bd:af:98:ac:1c:ca:6c:19:52:b3:36:7c:ea:37:98:bd:0c:
1f:a1:69:52:14:68:64:b5:3e:fa:9a:f1:a7:e1:1c:15:30:a5:
ad:8f:9f:ff:f7:a3:f8:c0:01:5b:e4:c8:54:b1:ad:a4:a2:0d:
ad:62:70:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:22 2024 by rpki-client on console-fra.rpki-client.org