Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer (raw, json)
Hash identifier: UPRDqexqZcBmNDmoUpSMS3kWvWXKNWhbXqORe/OcYD8=
Subject key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79539533DA73043456AC494C72BC9FE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.157.116.0/22
IP: 2a07:a680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:39:53:3d:a7:30:43:45:6a:c4:94:c7:2b:c9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:34:f8:ae:d5:da:9d:34:41:f2:7b:72:ba:
be:f6:20:46:1f:87:3a:c3:dc:6d:3b:20:5d:a3:65:
d2:51:2b:32:15:cd:0e:70:0d:69:54:ce:20:5f:28:
64:8b:62:9f:49:69:dd:bb:b9:78:10:0f:ae:16:90:
9b:a1:63:26:2e:b4:52:d8:55:d2:d5:89:d2:7f:3c:
9a:5b:dc:ba:00:ae:6b:d0:cd:9c:b3:df:d8:48:c0:
4d:1a:94:d8:a9:c8:cd:07:c8:bd:2b:56:89:b9:2a:
c2:d6:ae:72:c4:c5:cc:33:9a:9c:06:2a:19:86:d4:
6e:19:17:cb:a8:48:20:27:97:55:96:25:a0:5c:c6:
35:1e:e1:6f:df:2e:09:4b:ca:83:2d:5b:63:f3:09:
11:80:6b:b4:e5:ae:77:e1:ec:71:cc:f5:45:55:54:
09:eb:9b:da:f7:c5:bc:bb:37:ef:24:52:97:48:68:
d6:a2:09:36:6f:b6:3a:e6:b1:40:9e:ff:59:20:d9:
8b:8c:47:5e:e5:bb:7d:ec:e6:d5:ef:50:da:83:26:
d2:6d:2c:b2:a0:0c:ad:7e:3d:31:ae:b4:4a:d8:2c:
8b:0f:f4:6c:55:5b:70:f3:0b:7e:e2:f0:4a:5a:da:
a8:a6:18:e3:5b:b2:b5:f7:85:b4:5f:e2:43:01:65:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.116.0/22
IPv6:
2a07:a680::/29
Signature Algorithm: sha256WithRSAEncryption
99:67:a7:0b:4c:f7:99:d8:d9:50:2f:9a:bf:92:12:b4:0e:c3:
52:9a:10:ed:08:dc:2e:96:d4:ef:12:30:79:54:6a:bb:15:cc:
47:0e:2b:aa:65:f8:27:a2:e4:6e:1c:49:13:92:e4:4f:7e:89:
dc:d1:31:32:da:34:39:82:15:ad:ae:dc:5f:cc:1c:e7:87:ed:
5e:54:e7:f1:fd:6d:98:80:ef:7f:1a:14:7b:a8:b8:9f:d3:2a:
79:28:fe:ee:fd:b4:56:b1:ab:50:d0:81:db:38:7c:55:18:46:
b6:d4:1d:3a:22:16:d6:83:50:59:4d:ef:a1:86:98:bd:9d:ba:
74:da:1a:f7:1a:68:25:5a:9a:3e:43:b5:ef:7d:7a:d3:5f:53:
fa:29:d4:ee:ba:fc:eb:45:f3:c9:01:c1:9e:f5:ac:49:03:b0:
22:ae:a4:39:85:cf:55:e2:c9:88:9a:51:e9:70:14:bb:8b:05:
c1:5b:3f:96:37:1b:c3:9e:ca:de:6e:61:43:d4:e3:70:37:f4:
b2:cd:f0:f3:ea:b2:6b:34:56:63:c7:41:05:26:76:61:59:17:
58:6b:f9:f1:7d:6a:75:3f:46:9d:4c:08:8d:23:74:41:f0:72:
4a:d2:0c:0e:04:06:ab:aa:8f:b4:9f:69:7f:d7:f8:19:b6:af:
2c:4d:44:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:50:48 2024 by rpki-client on console-fra.rpki-client.org