Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
File: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer (raw, json)
Hash identifier: L1R1Bkx5r+s09MkS2shNzemlU/6vNZcD81fhtqZ37i8=
Subject key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500F3C0E36066B31B6B05352D03D909
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.223.10.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:f3:c0:e3:60:66:b3:1b:6b:05:35:2d:03:d9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:f3:da:63:ce:84:2c:86:94:c5:a2:68:99:
a7:b4:be:83:4d:49:fe:66:cb:1b:15:31:b9:97:9c:
9c:a6:3e:fd:06:05:41:a6:55:d3:1c:ad:69:cc:de:
b0:2a:92:7b:58:e8:bc:70:3b:34:44:51:0e:b3:6b:
b8:ac:5d:e6:b4:be:83:fd:b5:7a:d1:95:0e:35:a0:
04:f8:88:05:34:a6:6b:9d:22:8c:88:94:de:5e:e8:
ea:20:f5:31:98:7c:b8:0d:4f:61:d5:8c:85:6d:7b:
d5:fb:0d:c6:ac:ce:98:f6:6c:47:3b:25:7a:34:cd:
82:1b:cf:04:62:00:d1:01:a0:ea:e7:1a:50:a7:fa:
34:64:b8:0a:e0:ec:fe:45:76:cc:f2:5d:4c:51:f2:
5f:84:50:78:46:63:c8:1a:f8:5f:8f:87:a1:c6:6d:
4b:9a:6c:c1:26:6a:ef:dc:ea:a8:1f:9e:aa:a9:04:
bb:9c:9e:0d:23:55:f1:a5:fe:f7:a7:48:97:71:ab:
a8:e7:06:66:0d:f4:23:f1:6a:84:7d:76:a5:a0:ae:
14:b2:24:f5:3a:60:5a:16:cd:36:22:d2:36:0c:2b:
07:e4:18:07:85:a1:f7:2e:1f:f3:a4:1f:78:9d:a8:
5f:8f:f0:95:0a:a1:49:ad:60:4b:19:56:50:2a:68:
de:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.10.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:c8:2f:e4:e4:84:cb:01:f0:e0:de:ac:7f:e4:34:79:68:dc:
a6:85:c8:b1:e5:04:f6:59:55:61:73:b4:44:80:24:31:db:e5:
2e:95:79:ec:3a:a2:7a:a8:3c:d3:90:2f:3e:44:e8:40:ca:a7:
90:47:50:52:f1:c0:51:1f:f2:b6:e2:42:68:6e:91:ad:9d:6b:
3f:cf:ba:39:ea:96:a5:fa:16:42:a5:ef:63:85:a5:95:d8:6c:
da:4d:17:77:97:c4:71:d3:99:2f:a2:ec:0a:42:72:7d:1a:6f:
d8:3e:86:ac:b7:d5:70:6e:b1:ad:24:f1:b5:15:84:c3:72:cd:
34:1d:1e:d3:45:09:b4:00:02:f1:60:bc:fa:d4:f7:f8:00:0b:
27:3d:1f:54:6e:f1:d9:53:08:1b:aa:10:b3:54:b8:4c:58:8f:
9c:b9:a8:cd:4b:ec:36:c8:06:20:11:f7:8b:ac:ec:5b:75:51:
a0:b5:f9:5f:f7:6b:d1:61:19:16:f4:1c:1e:0a:89:fc:29:48:
e9:3c:f8:dc:07:b0:08:83:61:5a:4d:bb:66:d9:42:3d:21:65:
71:00:35:2a:2f:10:2f:59:98:64:e3:9a:b4:00:08:5e:68:95:
b3:90:98:78:5c:12:2e:25:9e:c5:2b:8d:56:e4:9a:cb:a9:ef:
ea:4f:d0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:14:52 2024 by rpki-client on console-fra.rpki-client.org