Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.cer (raw, json)
Hash identifier: kfWTuaJUKBzG9eLR14MXaFjvt/dSsRTqxYn5cD+zhJI=
Subject key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D9CDAE936DB8E8C1462B6356AF9F31FE9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 12 Feb 2024 10:26:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 95.128.195.0/24
IP: 2a13:3ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9c:da:e9:36:db:8e:8c:14:62:b6:35:6a:f9:f3:1f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 12 10:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e9:b7:0f:3f:45:35:1c:c6:49:6c:84:2d:79:
d5:b8:62:e2:dd:35:c5:d4:5a:18:db:6e:3e:2c:b9:
33:e6:62:e5:89:58:1f:da:ec:7c:e3:a5:59:a8:2d:
04:fd:4b:38:b1:52:b8:c7:af:68:ae:55:17:53:72:
eb:d9:ef:01:73:94:5c:5c:e6:71:c0:22:38:5e:ea:
87:09:b4:7a:9a:aa:df:ab:52:d8:2d:25:64:eb:f1:
41:0c:36:56:1a:85:a5:d4:62:97:e6:92:6e:ac:8b:
37:95:31:fb:a6:a4:7e:9d:6e:7b:b3:30:19:f5:4b:
28:df:48:93:f0:78:98:0d:71:79:16:21:ca:07:63:
07:1d:57:3a:7e:3b:6b:b0:15:f4:ce:b1:48:41:0b:
3b:a8:fd:df:db:75:6b:0c:9a:ff:19:d4:95:ea:ec:
5a:2b:2c:ce:2a:25:57:13:c9:57:41:3d:d6:d4:4a:
32:a7:aa:a7:39:51:f5:60:e2:1f:8a:74:65:33:8c:
19:e8:6e:f8:be:23:c1:94:93:51:2d:95:56:f9:93:
41:12:da:a0:b6:4c:ea:34:23:37:b8:8c:53:96:90:
0e:e4:8f:54:0d:02:5e:fe:7f:64:fc:ae:aa:b0:50:
df:49:31:78:d3:ed:7a:e0:b8:2a:07:9a:87:ca:d7:
22:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.195.0/24
IPv6:
2a13:3ac0::/29
Signature Algorithm: sha256WithRSAEncryption
14:9d:6c:19:dd:49:d9:4b:41:80:aa:97:54:54:af:c4:87:72:
ca:24:47:17:83:47:02:9d:7f:ed:7f:58:59:0e:f5:e5:05:f6:
0d:57:c2:4a:50:9a:17:af:d1:8e:19:63:e4:7e:24:03:69:7b:
50:2c:e4:86:67:7c:20:08:68:d3:d7:09:b7:0e:3b:e1:f4:4d:
d8:57:cd:72:58:cc:84:fe:d7:96:a9:39:34:0c:68:d0:5f:8b:
2a:f2:96:d0:2f:04:25:b7:f3:51:41:d6:98:25:8f:db:28:50:
ae:e3:ce:51:12:50:9f:94:49:e5:95:38:6a:ab:b6:e7:a2:4c:
cb:18:cb:4a:8a:a7:0d:75:99:67:bf:c2:80:d5:f9:c8:b9:53:
ea:35:54:66:e0:96:13:09:07:b7:90:08:72:93:bc:9c:0f:56:
72:5e:0c:a5:cd:c3:e9:ed:2e:02:d7:d3:21:b8:1d:fd:7d:7c:
31:0a:88:10:1e:64:76:2c:92:8f:0a:9d:46:fa:99:32:b1:86:
5e:eb:7e:3b:7b:98:88:62:58:34:07:eb:ab:f5:60:c2:a6:e9:
da:0f:8e:dc:4f:2a:1a:da:fc:db:59:ab:98:7a:12:ea:1c:66:
b0:fe:a6:77:57:8e:51:6c:47:f2:e5:ab:4a:91:8d:39:2a:ae:
2e:17:b8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:40:40 2024 by rpki-client on console-ams.rpki-client.org