Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
File: 59nPsHjtpYFvyAnpjCXLcZY-dbc.cer (raw, json)
Hash identifier: aFgAwwKBsHcLT7TxUBRBt/dUg9E4+kwXkPYkaOicwM0=
Subject key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B3DABA5705BBDAE0C7768477EC31A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.64.96.0/22
IP: 2a04:f880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:3d:ab:a5:70:5b:bd:ae:0c:77:68:47:7e:c3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:8f:e1:e2:34:43:69:17:48:a2:3a:21:85:
ae:c4:1b:bd:e3:04:b2:6a:cf:da:b2:09:b1:a5:56:
ea:bf:bb:ea:46:3b:32:cb:d7:8d:09:27:47:13:c0:
24:15:57:86:01:8b:74:4b:71:3c:ad:46:22:57:f6:
dd:e3:f4:ad:b0:67:75:fd:34:72:f2:28:0c:51:6e:
d5:b8:86:17:db:2d:af:ed:e6:39:13:85:de:28:83:
2f:3d:ec:56:5c:8b:aa:8e:27:08:76:4e:01:a1:48:
e0:9e:db:2b:be:55:7e:ea:87:ba:0b:78:d2:16:35:
81:ac:66:6e:b1:f8:bf:b4:dc:f7:ba:b7:1a:23:aa:
92:70:38:1c:f3:ec:10:b1:c3:b3:46:62:f5:38:25:
80:52:97:b6:84:67:b2:ee:a4:68:ec:37:a0:e3:68:
97:1d:1a:1f:ca:56:31:36:34:6f:4f:58:53:5f:99:
ef:28:ba:8e:15:6c:d6:cf:8f:c3:2e:60:81:83:0d:
90:fd:8c:ed:5a:f3:12:71:35:83:cc:9a:6c:68:5e:
b4:5b:62:39:4d:fa:9d:9c:2d:74:a5:95:21:ce:85:
e3:e7:19:62:66:9c:a6:fd:df:e0:d1:fe:d6:47:e2:
07:07:1d:2e:67:58:3a:3e:53:49:e4:7a:a0:2e:bf:
3f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.96.0/22
IPv6:
2a04:f880::/29
Signature Algorithm: sha256WithRSAEncryption
7d:d0:2a:02:35:cd:b3:c4:01:76:03:39:74:05:d4:a5:45:c6:
04:29:2e:26:b3:7a:ff:ac:c6:d4:53:2d:8a:a6:3e:99:89:29:
31:2b:87:f4:76:73:c1:d0:c8:58:b4:d4:85:67:d2:9f:d0:ae:
c8:a8:69:2b:12:64:00:74:6e:2a:04:30:74:91:2d:21:5e:dd:
a1:92:57:9b:56:67:a2:fa:5a:07:40:72:04:db:c7:87:12:e5:
3b:66:85:f4:19:65:9c:39:53:78:f0:83:8e:49:2a:ae:05:e9:
0d:e6:f9:40:4e:c2:73:bf:04:e6:50:be:09:b3:60:e2:42:02:
1e:64:9e:b6:8f:a4:05:cb:e1:e9:f0:f8:8e:e3:16:97:da:b0:
ce:6f:f3:98:ac:a7:2a:1f:3c:a6:53:38:95:ae:73:c8:5e:5c:
89:0a:b6:a7:c7:cf:31:18:2a:96:ac:bb:71:5a:ce:45:a1:ae:
f0:bf:36:c8:ea:82:ac:14:52:de:a9:cb:1e:77:a0:2b:c1:55:
ff:ba:c1:8a:7f:b4:5b:cb:10:b6:48:91:cf:db:66:92:50:c4:
60:8e:eb:b8:48:8c:18:04:88:29:da:1b:c2:38:14:2f:71:48:
e8:c4:7b:c4:b7:14:a1:a3:cd:16:f0:5c:3a:2f:af:74:4b:10:
8c:38:34:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:37:13 2024 by rpki-client on console-ams.rpki-client.org