Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
File: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer (raw, json)
Hash identifier: 3z8t8ibzoEGpD86bMV3yegmyzcG0dTdHJDbeZrPDMYM=
Subject key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF9B3ABBEDBEE17D52BC91800CFC25
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.22.14.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:9b:3a:bb:ed:be:e1:7d:52:bc:91:80:0c:fc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:53:45:52:c4:f6:a6:4f:94:61:26:3b:ca:0c:
85:6a:a1:6a:7b:3f:c2:38:28:c4:cc:8e:52:9b:4f:
a2:e7:44:35:a7:39:b5:54:39:df:af:d2:e8:d9:50:
1b:08:a7:dd:a2:5b:6a:74:88:b2:c5:8b:6a:25:86:
d6:d4:7e:e2:4b:e6:da:c0:de:5d:91:ef:ca:d0:4c:
e5:71:a1:cc:f9:26:b7:c1:59:8e:0e:a2:67:9f:b9:
69:6d:c7:b3:5b:71:fa:d7:53:77:2a:c6:15:c5:1b:
32:7f:83:da:ae:e8:47:06:74:80:ec:c0:c4:e2:2b:
4c:96:0f:65:81:c2:8f:6e:ec:b0:3a:59:8e:8b:8f:
2e:da:f2:55:8b:50:5d:c1:08:7b:23:c9:4d:26:02:
e9:55:fb:dc:5c:53:ff:10:9b:a9:f6:85:93:a5:bf:
44:f4:b4:55:9c:95:ac:ba:3a:d7:1a:01:1c:92:4c:
15:86:71:cb:66:7a:9c:00:e7:b8:f3:0e:99:22:0e:
d6:23:9c:9f:5b:4c:0b:7a:79:c2:48:af:8a:47:42:
1d:75:ad:98:25:0c:0f:e4:4d:18:67:ff:e6:ff:85:
6b:98:58:09:56:b7:4b:7f:d6:21:45:dd:ad:32:43:
58:5c:5c:11:4c:64:13:ba:e0:31:48:7f:3d:31:b6:
c5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.14.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ed:74:5c:aa:52:19:3f:55:0f:9d:89:c0:27:20:d2:8c:6f:
75:b8:72:4a:05:a3:68:85:51:7b:58:e1:92:58:7f:00:40:ee:
7d:27:da:a2:a5:c6:75:4c:1b:fd:69:70:23:70:9a:10:eb:6c:
9c:9f:9a:52:8e:03:0b:3b:63:8c:1a:10:71:7c:af:ce:09:74:
b1:10:bc:0a:bf:36:a2:c2:37:fc:b7:a5:7c:da:75:07:24:f9:
c7:45:4f:89:5a:4b:86:bf:aa:68:fa:4b:dd:12:0c:b9:a4:74:
0d:cd:a6:d1:0a:ca:f0:5a:f8:45:f8:73:0d:d4:d9:55:26:5a:
2d:cb:2f:00:63:83:d2:86:ad:0c:9d:30:cf:bc:17:6d:f7:77:
9e:27:7d:7e:3f:76:59:c3:60:3f:3c:f5:af:4b:99:97:93:59:
75:06:ac:a9:ca:3d:01:34:21:9f:23:33:35:70:77:fe:50:ac:
b6:4b:63:7f:a6:61:eb:12:2c:15:47:24:b0:69:ae:9b:ea:52:
7c:0e:f3:68:c9:65:30:04:c3:3a:8a:1b:e4:44:d7:ab:ed:2b:
1f:6f:89:83:ba:06:a3:52:f1:65:52:c3:01:f3:6e:3b:08:a2:
af:de:0f:c8:42:64:67:a8:6d:0a:b7:17:53:54:56:ba:90:b2:
5c:e4:2b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 09:39:02 2024 by rpki-client on console-fra.rpki-client.org