Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer
File: 36xiikxcxuVw9PQcTg1jlUkbTX8.cer (raw, json)
Hash identifier: MDIEgbzT7pezdMi6l9yRZ0UModptLIbEqLryHAY4sF8=
Subject key identifier: DF:AC:62:8A:4C:5C:C6:E5:70:F4:F4:1C:4E:0D:63:95:49:1B:4D:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F9D7276E171BD00DAC3A5CA2DB2B1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.231.124.0/22
IP: 2a0c:5f00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:9d:72:76:e1:71:bd:00:da:c3:a5:ca:2d:b2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfac628a4c5cc6e570f4f41c4e0d6395491b4d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:64:aa:2e:8c:c8:a1:22:ec:db:97:17:7a:
96:6a:0e:d2:d8:6d:33:5b:a4:07:f1:af:d5:92:4a:
d3:b9:41:ba:02:72:48:b8:a7:e3:f7:e0:24:08:19:
fa:9c:dc:5d:b4:11:cb:0c:37:39:56:14:c9:77:3e:
3c:a1:6e:fd:2f:58:4c:97:ef:78:e5:ee:8c:e8:93:
96:86:2f:a9:c3:9e:14:35:12:2c:af:7a:1f:a8:4e:
59:3d:2b:70:c1:63:6f:a9:d3:ff:23:ee:b8:40:dd:
e0:ab:05:53:64:a8:80:1e:56:5c:3e:07:96:44:36:
b1:a5:24:05:bf:38:04:b7:7a:9b:d2:24:d6:36:8e:
a0:10:84:34:1a:42:07:fd:ad:78:f4:41:8c:13:2e:
d3:66:a7:5f:b2:fb:3c:08:aa:a5:26:00:45:09:9f:
6e:dc:e2:ad:13:33:71:e7:b3:de:9f:19:22:15:b5:
57:66:d9:66:43:84:94:bb:9f:d3:83:db:ab:d0:bf:
79:24:40:31:de:be:e9:47:53:4c:21:57:60:ee:cd:
dd:72:ce:bf:f0:8d:99:e5:db:2e:33:2a:b1:19:f8:
fa:14:1f:fc:0a:02:07:87:27:9d:84:9f:99:9b:d8:
68:e4:14:e9:a3:f7:a4:97:d7:ce:47:15:a0:86:b6:
df:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AC:62:8A:4C:5C:C6:E5:70:F4:F4:1C:4E:0D:63:95:49:1B:4D:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.124.0/22
IPv6:
2a0c:5f00::/32
Signature Algorithm: sha256WithRSAEncryption
98:a8:f0:25:ad:76:65:49:31:5e:e2:8e:13:27:ed:70:d8:59:
51:87:1d:63:16:2d:21:50:69:28:31:3d:ea:85:95:e5:f5:19:
c0:be:d1:c0:a3:54:f7:85:58:fd:76:88:88:4a:78:7f:51:fa:
0b:56:fd:f4:d4:a1:bf:7e:d9:38:79:22:ed:9a:37:75:a4:47:
1d:bd:e7:23:8b:45:14:80:85:0c:cc:35:9c:9e:89:ce:e2:1d:
f2:f9:36:a6:54:e6:c9:7a:9f:04:12:a2:1a:57:8b:57:2e:39:
10:df:16:88:ee:43:f4:83:08:b7:42:6e:3c:9a:11:4f:02:65:
11:08:41:3a:fb:95:84:a9:3e:05:78:45:94:c4:a8:fa:8b:f5:
49:7f:f0:bc:bd:4d:fb:af:a8:e2:ff:d5:db:fe:b0:78:a5:63:
7d:7b:c0:0c:af:de:54:e6:c4:e4:cd:0b:9e:50:7a:90:be:b8:
5d:d7:19:97:a3:e6:f4:07:90:6e:d7:88:63:36:37:e5:7c:55:
25:80:cb:86:e3:7d:b0:40:17:dd:2f:c2:7d:0f:ba:fa:bc:11:
b5:81:90:b4:a7:2c:4c:37:53:3e:8d:9e:56:ed:b8:68:bb:d1:
08:75:79:09:61:15:78:c0:26:d5:af:bd:67:9b:3f:f2:c3:d9:
a1:80:0b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 14:34:24 2024 by rpki-client on console-ams.rpki-client.org