Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
File: 4u1kMJX_plfeBc7spdILJlwbf1I.cer (raw, json)
Hash identifier: sIInL5SI0IinSgxmwfpnY9Yw0X8gsRWFwppnBrLk4uk=
Subject key identifier: E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49373E7FEC4F90AE8D6F2BD9D30AE63
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.255.156.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:73:e7:fe:c4:f9:0a:e8:d6:f2:bd:9d:30:ae:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:17:bb:2e:f7:aa:df:00:c7:39:7b:50:0f:
1f:ab:1d:9f:a8:79:31:11:fd:5b:e3:9d:52:ba:3d:
ed:3c:cc:a5:f7:41:71:4e:34:3d:c8:e7:42:9d:37:
22:ca:53:eb:ab:79:31:40:8a:f2:8f:42:45:71:ef:
3b:8a:0d:0c:b9:e3:d5:79:7c:3a:da:82:f6:0f:05:
9b:4f:ab:cc:42:36:e2:5d:c8:6c:2e:69:88:a1:38:
49:9d:f4:9d:67:57:fa:46:f4:15:cf:92:cc:cb:6c:
49:ee:1e:39:b1:e2:99:bb:54:61:b1:45:63:7c:30:
4d:77:bd:69:f4:f1:e5:ca:25:79:7b:36:bb:34:c0:
77:70:9a:5b:d5:7a:78:04:f9:71:be:5f:01:42:42:
17:f9:4c:09:ed:e8:2d:a5:14:3f:eb:29:a6:89:41:
c3:2d:47:db:b0:21:6f:48:a4:fa:db:da:cc:48:61:
a9:23:0e:28:8b:a5:0d:d1:4d:88:e1:0d:17:cf:d6:
93:49:f3:64:d5:46:f4:48:61:d8:32:63:19:77:c8:
16:59:0c:6b:4e:61:a6:a9:e2:15:b0:24:ed:8e:86:
3c:0e:fe:27:1f:19:67:35:9a:16:4a:e5:46:9d:49:
da:dc:6a:e2:94:37:7b:b8:bf:c3:b5:d2:b2:bd:b4:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.156.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:86:60:57:9b:25:8f:b8:28:38:49:f0:31:ba:6d:ac:d0:ed:
5e:a6:6b:44:23:02:fe:9b:06:71:24:02:7b:18:29:0d:49:20:
8b:22:54:39:58:55:89:83:3f:1a:5b:81:28:4b:04:a3:bd:fe:
90:fb:50:83:31:61:b4:82:03:78:cc:c3:a0:2b:14:13:90:ff:
8d:f0:5d:e3:85:26:2d:22:85:80:7d:5b:08:b8:18:9c:47:ef:
39:84:46:01:f0:25:76:7b:f1:8e:ca:3d:3a:2a:e2:ba:2d:03:
8f:84:61:6a:06:74:d5:a5:87:ab:35:76:5f:ec:35:d4:a3:f4:
fe:ea:2b:61:18:4a:0d:19:e4:04:d7:52:cd:0b:3f:88:42:2f:
73:49:bc:7f:7e:50:a2:26:d4:8c:22:27:2b:35:08:9e:b0:ff:
90:a9:8d:ed:75:78:8b:38:4f:2e:06:d6:bb:19:a8:58:34:3c:
6d:63:c3:67:75:46:1c:6a:4e:94:1d:e2:33:a9:0e:1a:f7:69:
5e:18:64:bc:5c:77:45:b3:a0:82:4a:6c:aa:04:57:6c:84:e7:
8b:42:a3:ca:ff:ee:13:43:15:e7:02:6e:23:ec:c7:2a:f0:3c:
90:22:75:18:25:88:5d:e5:7c:03:65:57:60:35:b8:96:58:13:
56:b1:cf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:48 2024 by rpki-client on console-ams.rpki-client.org