Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
File: 156keuFhy7Pa75d4lzDXDEy6idA.cer (raw, json)
Hash identifier: udHecjm7T2GBKU1WdoktbK8GKEVHb4pTw0Z9pPuwMe8=
Subject key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A09C301FCCFB6398A13056F93ACC2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 129.88.0.0/16
IP: 147.171.0.0/16
IP: 152.77.0.0/16
IP: 192.33.171.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:09:c3:01:fc:cf:b6:39:8a:13:05:6f:93:ac:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:11:ae:5c:e1:51:92:2d:b5:e4:a6:e8:33:
9d:41:b9:97:fd:7f:e0:85:17:a9:22:c2:b2:52:9c:
db:8b:a8:7c:31:e2:bd:0d:e6:fd:b4:3e:21:70:c9:
8e:2d:41:cc:7a:4c:7b:98:24:bd:a2:f6:79:9a:5f:
80:a1:01:bc:99:53:0d:c5:1a:8e:fe:9b:0d:cf:f1:
8c:2f:35:a0:b8:cc:14:b9:89:a1:b5:1f:8e:db:63:
35:71:94:05:c9:40:d7:8d:b9:19:ab:dd:55:14:ca:
78:d2:11:0a:38:6c:d1:9a:fc:64:da:00:47:a0:d0:
b8:27:be:90:c3:2b:ea:40:64:56:cb:61:33:c0:3e:
67:7b:b3:39:5d:c5:13:2d:be:12:f2:f3:38:f4:ef:
29:2e:6b:7a:e8:ef:d9:9b:20:da:53:86:03:60:bd:
7d:58:70:42:ff:cd:0e:ab:21:49:90:69:d6:b7:d3:
df:b3:51:c8:c9:60:8b:67:0a:bb:ea:41:d4:d3:bb:
52:91:4e:ec:0b:20:da:71:cd:e1:2d:11:fa:f1:d7:
67:c5:96:65:32:73:ed:9b:f9:9b:fa:2b:ac:7c:98:
01:29:87:bf:78:81:6c:38:34:35:88:7a:59:4b:e6:
1c:65:96:96:be:04:e7:dd:00:5e:42:1f:32:a1:f5:
03:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.88.0.0/16
147.171.0.0/16
152.77.0.0/16
192.33.171.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:ab:36:3b:79:9b:f8:a1:b3:0b:e4:50:fc:85:1e:a4:dc:ed:
ed:bc:95:a2:9e:ed:0d:a0:15:68:a9:ac:5b:c6:39:0b:d0:85:
a2:1f:78:ce:09:56:0a:96:c8:94:3a:9a:06:9c:d3:0a:6f:7e:
25:0a:a0:ca:b1:c9:82:d5:29:4c:e3:8b:fa:17:4a:cd:0c:28:
f5:28:aa:fb:10:d8:dd:6b:60:ed:21:29:53:2b:26:62:e1:87:
c8:31:56:c6:67:61:7a:93:97:36:a6:ba:a9:4f:c1:d0:da:be:
4f:85:b9:1e:14:05:1f:d5:53:73:87:98:aa:03:94:cf:30:19:
ee:6a:11:8a:23:74:60:d0:8b:f9:84:65:56:f8:0a:50:7e:5b:
0a:d5:c7:b8:f6:5c:fb:dc:9c:4b:eb:41:dd:d8:d5:dd:35:dc:
3f:ae:5c:02:53:be:a0:11:fe:29:b8:3e:42:22:57:1e:a0:0b:
4b:d3:b8:68:38:a7:9a:c7:83:1c:8b:2d:04:e5:a1:15:2f:ef:
2b:73:bb:d2:72:69:a3:b2:a9:ff:04:c7:9d:d5:50:5c:a4:db:
b7:fa:6e:62:4f:25:91:09:f7:49:2f:10:e1:4b:c3:9d:3e:ab:
4a:4b:2a:0e:3c:64:87:86:88:37:40:78:85:50:e6:c0:92:69:
40:65:ee:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:51:51 2024 by rpki-client on console-fra.rpki-client.org