Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
File: 2sMmMqqRVCU8bc0jMemtaSC2vcw.cer (raw, json)
Hash identifier: gVThF3cu2fQqnQv0GeBtd3TLXG3pVIVBCseTGhoY1gA=
Subject key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B730AA3C8DC4F64F70CBAC1A2E0CB7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 212.46.57.0/24
IP: 2a12:fc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:30:aa:3c:8d:c4:f6:4f:70:cb:ac:1a:2e:0c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:24:55:ad:2c:7d:64:4b:3e:a8:bc:55:24:e7:
91:15:e6:fd:d6:73:92:55:c6:63:f9:14:a6:e4:ae:
44:87:62:d7:73:c5:74:35:b1:22:89:2b:c6:0e:78:
c7:f4:5c:1b:49:dc:84:62:8a:55:b6:05:ce:f8:0f:
5a:82:ee:27:37:13:33:b3:a0:93:c8:e9:13:62:d7:
56:f4:93:99:05:cf:4a:d3:9a:6e:90:fb:54:4e:0b:
c3:0d:8a:8e:9c:8c:f9:6b:af:4e:5b:a0:34:7e:22:
d0:1b:98:c5:77:cc:70:a9:a3:22:ca:9c:22:9b:67:
f7:b1:37:54:99:7f:98:f8:98:ff:cc:c8:62:9c:87:
f3:a3:33:28:4c:3d:bd:aa:4e:87:b8:35:23:8b:d3:
70:bd:49:83:76:49:68:af:40:8e:04:9f:67:98:86:
3d:97:8b:0f:bb:e7:ff:3d:48:6e:58:9d:d4:a3:7b:
ce:b5:c6:a6:ae:42:12:d4:c6:ab:d4:2b:d8:e3:eb:
c3:aa:61:b1:0b:0f:83:ef:33:d2:83:4f:b3:fc:05:
2e:8f:c3:82:65:30:c0:cd:8f:27:44:87:90:53:7b:
fc:8c:91:90:5a:ec:d2:6c:71:06:ca:5a:b2:c9:42:
4d:28:22:0f:bc:ef:a3:a9:eb:9d:5e:2a:14:9c:8b:
4f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.57.0/24
IPv6:
2a12:fc0::/29
Signature Algorithm: sha256WithRSAEncryption
7d:7a:17:2d:5c:d7:ef:a9:5d:08:22:5f:d5:cb:44:71:80:2c:
16:2f:9c:79:2e:4f:99:ee:bd:8f:db:84:78:38:81:cd:3b:a9:
87:15:35:a3:ee:c4:1c:b9:59:ec:b6:72:6d:73:11:c7:ad:88:
65:bd:27:1b:f1:ff:db:c6:60:c7:09:6b:81:40:02:e1:98:5f:
ce:d5:0b:83:f4:a1:de:9d:f6:7d:67:43:23:a1:4b:71:14:b0:
11:18:9d:a8:bf:47:6b:53:1f:5c:10:a6:7f:45:0a:b1:ab:fa:
a8:1d:97:e4:3f:4d:d9:e6:6f:ed:a9:5a:4d:7b:bd:f4:12:96:
97:f0:e4:a7:d4:79:94:26:7e:82:48:79:45:f9:90:38:c7:ad:
e4:e9:41:8d:bf:7f:93:b7:0d:a2:00:7c:54:8b:e9:a4:ea:6d:
0b:4e:d8:16:a0:2a:98:e6:79:06:6f:a2:f8:67:fa:81:74:ec:
bd:c5:f0:e2:1c:31:c4:13:ba:11:b0:a1:75:7e:4b:2b:71:31:
b0:73:01:49:5a:bc:e1:fe:66:2f:f1:8b:d7:f0:9c:01:50:d3:
db:a8:ba:6e:0e:83:8a:8c:46:ff:24:a8:db:ef:30:0d:f2:a1:
79:98:f4:9d:34:1f:08:e7:41:10:bc:df:5c:73:dd:16:24:5d:
9f:e5:db:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 08:53:36 2024 by rpki-client on console-ams.rpki-client.org