Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-f97aGM87FGhgQZ7gxgmY335jW4.cer
File: 1-f97aGM87FGhgQZ7gxgmY335jW4.cer (raw, json)
Hash identifier: 8oD/eywnPljBrubrNoVj7oopY23qvcOeCK/0os5vp1E=
Subject key identifier: F9:FF:7B:68:63:3C:EC:51:A1:81:06:7B:83:18:26:63:7D:F9:8D:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86FDAA4601CBE4DD3054C0F3CD21B74
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/f6a0c1-480a-4232-9fb7-8fd384b42c9e/1/1-f97aGM87FGhgQZ7gxgmY335jW4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/f6a0c1-480a-4232-9fb7-8fd384b42c9e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.251.160.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:da:a4:60:1c:be:4d:d3:05:4c:0f:3c:d2:1b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9ff7b68633cec51a181067b831826637df98d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:70:e1:f6:4d:3e:39:b5:bb:bf:d8:d5:4b:81:
e3:ec:9c:b9:a0:a4:c1:f3:e5:66:77:39:09:89:37:
b4:a5:03:c2:cb:92:39:2a:8e:bc:03:fd:fb:37:20:
28:8b:c2:d7:9a:f4:5c:b4:d1:ed:be:38:ac:2d:db:
79:81:72:ab:d1:4c:ee:8b:19:15:5b:95:fb:de:04:
9f:ce:d8:72:84:9b:fa:a4:48:e5:bc:a3:81:38:ce:
bd:ac:1f:f2:ab:67:ee:be:6b:b0:9a:82:c9:0e:9f:
f5:89:eb:27:a0:0d:60:a7:db:33:45:3d:1a:69:88:
0a:d6:43:f9:8e:2d:82:c3:3f:92:59:c3:fc:90:b9:
17:ca:9d:bc:08:88:77:4e:fd:53:e9:96:64:ec:7f:
43:6b:be:80:6c:5f:d0:ae:ba:7a:6f:29:a9:1d:56:
a7:cb:be:62:ce:bc:ad:c8:16:59:e8:6a:12:19:34:
75:2f:cd:b7:9a:ff:dd:b5:02:57:4a:b3:d7:73:e9:
96:65:1d:47:22:42:d2:7c:a3:cc:3c:ef:7f:05:34:
6f:c9:e7:da:22:0d:2c:b4:9b:a1:82:0b:55:60:ee:
41:ab:7f:2e:24:ee:dd:54:99:e8:53:63:96:00:99:
8d:24:4d:f6:d5:12:be:17:98:ad:f6:f3:3f:2c:85:
11:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FF:7B:68:63:3C:EC:51:A1:81:06:7B:83:18:26:63:7D:F9:8D:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f6a0c1-480a-4232-9fb7-8fd384b42c9e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f6a0c1-480a-4232-9fb7-8fd384b42c9e/1/1-f97aGM87FGhgQZ7gxgmY335jW4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.160.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:74:be:c0:d4:47:15:97:ea:be:dc:84:ab:dd:4d:ac:55:dc:
12:c3:de:e4:f3:64:68:be:39:ee:56:1a:73:c1:5b:2e:a7:b8:
0f:ef:a6:bd:f1:97:17:a2:f5:e3:6f:36:97:b0:73:e6:9f:b0:
ef:a8:37:f7:09:7d:1d:1b:2f:44:b1:a0:8f:59:b6:bb:3e:f8:
ec:54:76:34:9e:52:26:0c:b2:a2:31:1e:4c:03:6f:0a:be:bf:
f7:79:bd:f8:d6:d3:62:2d:ad:71:31:e8:a8:23:f8:12:cc:1e:
3f:c1:23:93:a8:ed:a5:92:0d:6c:40:98:c4:50:06:d4:88:5e:
86:2d:5d:67:84:21:02:d4:9f:79:8f:86:e4:5c:69:c7:74:6c:
82:5b:69:f4:6a:67:5e:6e:35:18:af:8b:b9:7c:aa:66:62:c8:
90:1f:59:2a:4f:c5:58:88:0f:3e:59:e9:7c:b5:c1:76:d5:b1:
da:69:55:f7:aa:01:e2:68:b7:4b:5c:98:5b:66:7f:81:22:0d:
42:92:5f:6c:b3:18:0b:ae:f8:19:0a:e1:fe:32:80:d4:f5:49:
96:7f:e6:3b:f9:fb:ea:54:fc:8a:f4:2f:02:d8:31:1a:5f:53:
de:87:65:ce:24:b5:3a:ee:64:bf:d6:85:cc:a0:8d:1b:c7:66:
2c:61:a1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 13:33:27 2024 by rpki-client on console-ams.rpki-client.org