Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
File: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer (raw, json)
Hash identifier: OAob4EIV71iCNxUEetniCZqGNmq8ENlmqtjYqy8O04g=
Subject key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6499D2902A56C3F34AB4B6F71EFB4A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:678:5d8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 13:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:9d:29:02:a5:6c:3f:34:ab:4b:6f:71:ef:b4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:17:72:a6:da:5d:8f:27:b7:50:9f:0a:74:
18:88:7f:cc:89:b5:b9:9b:6e:35:45:b9:93:ce:2a:
30:20:9b:8d:e5:6a:ea:20:aa:38:46:52:1e:6c:19:
79:c8:07:10:3e:76:2c:c8:07:0f:95:1d:a6:7a:b1:
90:3d:e4:c2:f3:1e:c0:c5:1a:ba:5f:c0:e2:09:6a:
88:c4:dc:5c:5c:e0:25:70:f2:ee:cf:73:92:a6:ef:
77:00:6f:ff:c5:c3:80:03:8b:75:a5:c9:78:f9:c1:
5e:74:5b:04:c5:97:b7:c6:dd:d9:2d:ce:ca:9e:75:
5a:89:9a:00:85:b3:e6:6d:dc:22:d6:5a:f0:9a:23:
c2:b1:f8:c7:f5:38:ca:73:77:7e:fa:73:e3:9e:16:
da:11:cf:e8:7d:e8:bd:4f:47:42:a6:92:f5:2a:d8:
de:36:df:90:32:af:ef:c0:a5:da:3c:cc:e2:0d:b2:
1d:51:71:c8:e9:39:d7:03:3e:1f:78:48:8b:3b:af:
6a:f6:0c:6c:ca:41:7f:4e:22:f2:7c:20:13:6f:7c:
06:3a:f9:a0:bc:01:39:8c:ad:58:ab:8e:d3:33:02:
38:03:e1:0b:4a:83:0e:1a:ed:00:14:90:23:99:6e:
e6:c9:eb:a2:00:d1:4e:ae:87:eb:b3:47:ab:06:9d:
67:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:5d8::/48
Signature Algorithm: sha256WithRSAEncryption
2e:96:27:b6:22:4b:a6:48:aa:02:aa:3b:6b:02:16:02:cc:71:
af:2c:75:23:c3:fe:aa:ec:61:dd:62:47:05:0e:3a:f7:43:31:
bf:81:10:f5:29:1e:74:80:b0:4a:be:88:b0:67:dd:ae:b6:91:
64:6d:0a:5a:59:d2:59:76:90:e8:c6:2a:e8:51:d9:fa:c2:36:
96:36:d9:11:a0:77:6f:5a:de:66:a1:2c:76:30:e3:ae:2a:7b:
9f:a5:c9:b9:e3:5c:99:d9:c6:69:7c:23:d3:6e:a0:9e:d9:7e:
ae:b8:8e:9e:5a:2f:f0:ba:08:58:53:67:58:13:84:48:4e:17:
28:d2:0e:33:ba:47:93:a5:94:56:02:e2:4e:cf:0d:58:48:91:
7c:f2:b1:2e:72:55:1e:d9:ad:89:86:30:67:d9:4e:a4:ac:52:
9d:20:b8:b1:87:f6:fd:d8:6a:90:00:7b:01:15:17:b8:85:af:
98:11:98:83:5f:0c:6d:22:32:e8:b2:db:91:af:1b:89:e7:38:
81:bd:de:c6:56:43:12:df:9e:99:67:5f:21:b4:08:ee:72:3f:
88:7b:7c:92:82:f5:be:85:15:ce:3f:a6:e6:b6:e4:92:d9:c8:
29:e2:2a:17:86:96:cd:f0:4d:0b:07:2a:d4:44:7d:5a:be:21:
5d:a9:db:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:30:43 2024 by rpki-client on console-fra.rpki-client.org