Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
File: 4UYAGfiAaeNhThUQkhzH5E0cq-I.cer (raw, json)
Hash identifier: a6I5XzlKfiWxSySlgxDyX90NkcrSTTufpcL6egIUSbY=
Subject key identifier: E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D271DD61248B5126CB00BFD45B2BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.171.224.0/22
IP: 2a0a:ff00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:27:1d:d6:12:48:b5:12:6c:b0:0b:fd:45:b2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:b0:6c:67:48:81:e7:9d:7d:e7:51:8b:b2:
d5:39:c0:67:ea:5d:a7:07:50:bf:da:07:06:c4:53:
0a:85:78:94:09:be:7d:f6:47:f7:af:50:c2:46:7c:
6c:89:13:dc:ab:3f:37:83:87:04:8b:42:92:99:30:
00:87:02:2f:e1:eb:02:aa:ac:6e:05:15:b5:dc:49:
33:b2:3d:54:d9:e5:42:a8:ab:f6:34:df:dc:29:f2:
d1:da:48:1c:fa:68:f6:01:c5:57:cb:9b:e2:ac:28:
44:3e:43:aa:a4:16:40:79:eb:2d:18:19:22:c3:1f:
0e:96:54:d8:d5:f7:f8:02:9b:0c:9e:14:9d:28:4a:
cc:80:7e:6f:e2:b3:14:33:3d:e0:23:07:a1:05:d4:
27:37:08:dc:2d:5c:84:08:bc:c9:db:7d:ec:f1:2e:
4d:42:01:76:70:84:db:08:a4:9d:2a:62:0c:17:e8:
a1:f5:d0:72:02:dc:81:9b:b2:c9:e7:89:96:15:cc:
be:a0:86:6a:91:b2:29:e6:e3:01:13:27:44:67:04:
22:dd:87:d6:b0:19:f1:e6:0f:67:05:35:03:01:04:
ce:a2:ff:0a:6f:a0:cc:d9:4f:42:2e:0b:45:4c:4e:
23:b5:55:91:70:1b:ff:19:6d:c9:ce:3b:43:70:7c:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.224.0/22
IPv6:
2a0a:ff00::/32
Signature Algorithm: sha256WithRSAEncryption
4c:f7:23:18:c9:19:f9:64:4f:88:f4:ea:8b:83:f0:e0:62:a5:
82:17:62:4c:e3:d6:0a:99:ae:83:77:25:fa:6d:5c:75:a9:c0:
5b:6e:d4:fe:53:c7:07:1f:62:bc:50:fb:7f:10:2f:68:15:ac:
38:7c:0e:28:e7:46:3c:83:49:e4:fe:e2:28:83:00:fa:fb:eb:
e4:31:7f:99:7e:d1:e0:db:60:aa:b1:2b:53:c9:52:82:55:9e:
bd:84:ea:ce:0f:59:b8:77:14:27:3a:5e:d8:48:1a:4b:45:1a:
26:02:93:ac:b0:72:6e:2e:c9:c7:ac:00:ad:84:b7:e6:6b:9b:
97:d7:c5:79:44:76:37:03:07:36:2b:ce:63:e6:83:20:8d:ec:
e1:0c:15:09:9a:4a:10:73:2f:6e:08:ff:fb:14:39:38:92:0a:
64:79:5c:8c:14:d3:a7:58:32:56:26:74:0e:d4:ad:ae:92:72:
f7:70:01:76:a2:bc:a3:e3:8e:88:8a:d9:70:e2:13:f1:02:be:
2a:db:93:70:cb:61:86:17:37:02:ce:a4:f7:e7:bd:9f:18:a8:
52:54:75:da:b8:1c:a7:c9:15:95:7c:59:35:e7:75:4b:50:c4:
0f:b7:10:1f:86:f9:2b:eb:b5:35:4b:2a:f9:76:a0:1e:3e:d1:
f7:b2:02:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:34:00 2024 by rpki-client on console-ams.rpki-client.org