Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
File: 34CJqp4dXBKrrUOnAVEdocZfn6Y.cer (raw, json)
Hash identifier: cVpRC/UcvWHi1QiNtvLNz7+LdcVWxS9QfXPr9nzB5GE=
Subject key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB56406CAF7D6B92B8D7BC43AD20B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.247.181.0/24
IP: 2a11:d5c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:56:40:6c:af:7d:6b:92:b8:d7:bc:43:ad:20:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a1:5a:54:a6:b2:18:7e:3f:d5:96:f2:95:30:
a7:34:8b:c7:e3:b7:91:05:a6:8e:0e:01:ed:3e:0a:
20:de:56:ab:2d:86:d0:44:0b:7a:61:37:81:9c:18:
4f:25:44:57:5d:2c:4e:a5:a2:52:c9:3e:bf:1d:bd:
08:cd:9f:9d:7c:05:2b:97:69:8d:9d:b8:fc:e2:8b:
24:f0:30:fa:6b:8a:f2:eb:46:c9:2e:59:15:11:3b:
64:dc:93:e8:65:e2:14:12:5e:3c:8d:fa:d3:23:1f:
a7:cb:21:52:d4:92:b6:0f:bb:86:44:3c:86:5d:e1:
45:ab:d0:13:d8:41:79:39:ce:04:de:b5:f3:36:04:
59:b3:13:48:b2:9a:03:02:97:91:4a:c7:7b:09:33:
1f:7d:bc:51:c1:fd:41:dc:28:a7:ee:7e:43:f3:a2:
9c:61:ec:11:23:de:8d:71:fa:57:d9:37:e2:e6:23:
89:7c:64:36:42:e9:33:6e:fc:db:6a:53:a5:17:f7:
56:c9:e8:20:42:a5:ff:37:4b:88:34:0c:1f:80:44:
f8:e5:25:d8:2d:8a:5c:02:4f:7c:b5:41:91:d4:72:
8b:18:25:e9:cc:7a:e4:fe:8c:af:fb:e9:a9:2d:fa:
c8:62:92:74:0f:21:54:3d:6c:7b:94:1e:92:e5:6c:
a8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.181.0/24
IPv6:
2a11:d5c0::/29
Signature Algorithm: sha256WithRSAEncryption
39:09:cf:6d:1b:42:44:1a:2d:98:78:93:ff:78:f5:58:12:46:
84:7b:23:0f:8c:9a:be:c4:9b:bc:e2:32:91:0a:50:ea:80:60:
a0:63:d9:a7:c4:b2:f9:27:59:15:14:5b:22:a3:77:f8:81:47:
1d:4c:4c:a3:68:ee:d6:e2:9c:fe:3e:3f:32:92:1c:38:f8:55:
a1:f8:35:fd:79:ba:25:8b:27:6c:e9:f1:4a:07:73:a9:a0:c2:
8e:10:fc:54:5d:4f:b1:cd:97:37:36:ae:e8:6c:cb:4a:56:78:
0d:2d:1f:a5:3f:81:1e:5d:4f:87:d0:01:a3:1b:8d:ce:63:d5:
b3:50:47:7c:be:bb:14:a5:0c:df:25:37:8a:b8:ba:4a:6a:0b:
9e:ab:5b:af:ee:64:c6:ed:5f:ab:a8:d5:5f:af:3e:eb:de:90:
72:af:8b:38:1e:ae:17:8d:d7:8f:d5:0a:70:19:f9:a1:2d:b8:
8f:46:ef:d5:7a:fb:33:99:a7:58:d6:4f:5c:f9:bb:1a:6d:6f:
29:5d:31:5d:8f:33:5f:1b:24:ed:cd:5a:af:f2:ff:61:a2:e7:
ea:05:16:fd:ff:35:88:1b:88:bd:7a:61:af:5b:6d:3e:2f:f9:
7e:c8:11:75:ca:8f:d1:21:a8:2c:19:31:56:35:65:45:ee:0d:
5d:1c:64:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:34 2024 by rpki-client on console-fra.rpki-client.org