Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
File: 4rWwjcQz-On3dyfLUfa6JL3V85o.cer (raw, json)
Hash identifier: SfLYFJT1mti+XtnUILbYbeXbSY7sID10ugpT4+s5SwQ=
Subject key identifier: E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D0CD807DA700ED78554127ADA894AA247
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 15 Jan 2024 11:18:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.183.151.0/24
IP: 193.161.200.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0c:d8:07:da:70:0e:d7:85:54:12:7a:da:89:4a:a2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 15 11:18:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:b2:99:82:21:0f:9e:86:17:b1:b1:af:94:
1b:a9:02:79:a6:ad:31:8c:bf:7d:e7:4c:c6:20:90:
26:e3:d9:99:75:43:5c:f7:6a:cf:0e:bf:f5:ec:81:
5a:f8:ba:8d:c1:cd:e1:98:90:e0:26:9b:de:83:50:
db:7f:4e:75:cf:b1:d5:a2:d5:f1:d7:6e:77:10:89:
0a:a6:22:c6:71:60:7c:84:3e:b4:ac:5c:e5:07:67:
a5:0f:d1:c0:8d:38:91:c0:f8:a0:b8:9a:2b:c6:1b:
6d:30:88:01:0f:df:56:c3:e9:e3:8f:84:0c:b6:b7:
a0:52:90:c0:cb:d5:aa:92:49:bd:c4:90:25:94:29:
a9:37:77:c2:df:b3:02:df:20:28:c3:ea:e9:75:ac:
05:96:d6:bb:da:97:31:bc:6b:e0:2d:74:b7:b8:50:
db:73:8d:03:cd:c1:a9:fa:8f:4f:c8:71:5e:96:cf:
96:88:9b:a0:be:db:e4:25:10:66:77:95:09:e1:0d:
9a:09:ba:38:9d:b0:26:48:17:5a:84:95:3f:f6:12:
de:9f:4a:d8:20:ca:2c:e7:26:98:6b:a6:15:9f:32:
2b:38:7e:df:71:d2:a7:75:b3:2f:21:c6:91:71:92:
61:31:1b:9b:12:00:c7:c2:9a:91:10:a6:a1:ef:d1:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.151.0/24
193.161.200.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:51:be:17:19:49:0b:da:69:86:ae:a2:6e:7b:e8:4e:db:53:
72:07:83:60:1f:5a:8e:f4:f0:c3:ee:59:51:3c:69:7c:50:e8:
8f:c2:80:c5:3c:24:cd:e6:b2:c3:a8:83:3d:80:ca:05:58:f4:
6d:16:06:83:b9:c7:18:51:4b:05:9e:c8:80:b5:5f:ab:22:01:
67:35:6a:ef:7c:36:d9:7a:e0:b7:e3:3c:ca:f4:b1:e0:fc:76:
60:b3:ea:a5:2d:d8:1e:a5:85:fb:b2:2f:e6:8b:18:d4:0a:53:
65:61:d2:71:50:73:9b:81:f7:42:1a:b9:d6:19:4c:1f:0e:75:
a0:61:b7:e9:9a:23:3b:34:2a:6f:ed:b5:48:81:af:21:ba:9a:
7c:e1:a0:73:3f:88:bb:86:0d:5c:07:3a:df:da:7d:81:1d:d7:
45:b5:65:33:50:60:63:3e:0e:e8:df:63:11:30:e0:0e:42:5a:
a3:8e:2a:e1:97:1e:84:0c:20:0d:4b:94:2f:23:8f:f3:90:7d:
3d:9b:98:5b:4c:1a:4d:53:1e:d1:48:1d:1c:ce:8c:89:f9:e8:
f1:a8:b2:f0:84:ff:55:3d:3c:8a:38:dc:91:f8:05:2c:8b:db:
24:26:16:ce:54:62:4d:9b:51:d0:e7:6e:0d:c6:aa:85:18:5d:
1a:50:5a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:01:23 2024 by rpki-client on console-fra.rpki-client.org