Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
File: 28L_akYQUNSPP9sLUThxVLXWzQ4.cer (raw, json)
Hash identifier: +rdCBRYsQPzZt6TBQ9E1QyIT3fQkjRcEkkGG3AYmBe4=
Subject key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BBF27DEC1C0FD37756802FE339D746
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.43.183.0/24
IP: 2001:67c:66c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f2:7d:ec:1c:0f:d3:77:56:80:2f:e3:39:d7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:e5:03:3c:2f:d4:ba:12:58:99:93:d0:7a:
20:4d:29:d9:40:77:20:12:17:14:97:3c:72:73:c4:
94:d3:b3:56:85:47:6c:c4:db:72:de:0c:5e:02:96:
3a:1a:f8:0a:a8:9d:85:db:34:13:05:c7:d4:5c:86:
6f:52:3d:1f:99:a6:2b:fd:ad:17:cc:9d:e2:9c:72:
79:36:ef:8d:b5:6f:a2:15:4d:08:81:b4:90:d5:93:
01:53:c6:5e:0e:ac:03:fc:38:14:f7:55:e5:68:17:
37:a7:ce:27:2a:4b:e4:40:42:a2:93:67:93:ff:a9:
5e:a0:ab:b9:2a:81:82:32:f6:f2:5a:af:2d:2c:ab:
a4:88:0c:de:42:c8:fe:3e:6f:e1:36:92:ec:c5:7d:
0b:38:b5:07:3e:90:4e:eb:9f:55:b3:2a:4e:35:b4:
90:4a:7b:09:58:32:cb:95:4e:f2:1a:c0:6c:d2:97:
bd:38:57:cd:9c:b2:17:d3:10:f7:c7:e4:97:66:d2:
05:19:29:bb:a7:f1:c1:b8:bc:0d:2b:78:47:0d:28:
c6:1b:18:e1:9b:2f:2f:03:4f:7f:f9:67:94:7b:4a:
e6:20:2d:b7:43:59:c8:7b:31:54:6f:b6:1d:79:5c:
9e:1c:19:2a:47:11:52:1a:a0:a7:41:3b:eb:17:93:
81:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.183.0/24
IPv6:
2001:67c:66c::/48
Signature Algorithm: sha256WithRSAEncryption
80:18:c4:96:7d:86:36:a8:9f:ae:ce:bf:3c:be:4b:c8:a9:c7:
ca:85:45:0d:34:31:7d:43:f2:32:79:20:eb:4b:bf:0e:15:24:
f0:ab:d9:fe:3b:b0:49:b5:e2:12:df:56:9f:c0:3b:53:73:27:
e8:59:18:71:cb:cf:3f:de:93:48:05:7b:64:42:23:64:15:d2:
75:b6:aa:5c:8e:28:2e:09:1b:3b:64:4a:78:77:77:f1:b4:da:
df:01:3e:64:ca:f8:bd:2b:54:da:84:b3:6d:28:4b:60:c8:85:
6b:89:d7:23:9a:de:35:6e:8d:91:ea:76:e2:e7:7c:43:d9:30:
66:68:4a:60:6b:08:8e:36:e1:05:a9:5b:be:fc:83:54:20:b2:
50:a2:b0:3f:d8:b8:d8:e0:13:f3:8a:c6:c6:c2:21:50:e1:30:
3f:10:f8:0e:35:21:bd:d6:8b:74:f0:ba:16:35:18:04:cd:37:
1c:e6:aa:86:bf:f7:1a:0a:dd:28:b3:90:7f:d1:72:cf:40:4d:
7e:6d:d2:14:b0:9e:d0:e5:74:ef:eb:c3:f0:fa:b7:ae:2e:56:
ac:40:68:eb:c3:34:b2:c0:48:04:92:2e:94:4c:52:e3:c4:cc:
fb:49:01:70:93:84:c4:56:cb:40:45:17:39:8f:bc:0a:be:1b:
27:f9:31:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 08:40:43 2024 by rpki-client on console-fra.rpki-client.org