Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
File: 5miK6WMjwfz6tUspRVc5e0mwO8c.cer (raw, json)
Hash identifier: ZLSbtdc48CMXKvL7oCvpyYkweA5G4Ezb9rK92543iA8=
Subject key identifier: E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6965CAB270A8093CD956317A31339
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.146.40.0/22
IP: 2a07:4d40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:96:5c:ab:27:0a:80:93:cd:95:63:17:a3:13:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:74:97:e5:56:f2:61:9f:86:4e:89:57:20:86:
dc:07:8e:01:6b:00:dd:18:6b:3f:52:22:48:bb:f7:
29:bf:e3:a5:e8:f5:51:df:f3:e0:ff:b6:18:83:fe:
6c:70:6c:53:ef:93:82:39:9c:3a:22:4a:5a:3a:ca:
a0:07:de:f9:da:d2:fd:fe:b7:e2:ee:0a:72:f3:da:
32:02:f9:32:97:cf:31:97:b4:a6:f0:9a:79:21:32:
53:70:cb:8f:84:90:e0:9f:97:9f:a6:dc:e0:8b:a4:
44:31:b1:31:2e:84:de:5b:0f:9b:d7:80:3c:36:6e:
22:0e:60:70:a4:ee:82:e8:c7:fc:65:0e:b9:00:6e:
00:0f:c9:36:54:a1:25:bd:fc:e8:f8:32:5e:1d:82:
82:a2:69:a8:c1:e2:6f:2e:aa:4b:a2:2f:70:a0:ad:
46:a8:20:68:a6:da:0f:c3:1e:8a:77:29:50:c4:cb:
ac:ec:16:67:b8:07:d8:72:8d:0d:10:71:c8:cc:a8:
6e:73:39:b0:30:8c:f2:60:90:8f:d1:ea:83:9d:f7:
63:ff:97:38:de:c0:46:df:8f:c1:6e:b4:2a:88:e9:
8b:c1:c2:58:f7:3c:38:90:62:f4:0a:ef:24:dd:a7:
9f:8a:b1:55:93:20:d7:33:45:80:22:a2:75:82:c2:
f7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.40.0/22
IPv6:
2a07:4d40::/29
Signature Algorithm: sha256WithRSAEncryption
74:67:c2:a5:8a:eb:78:0d:6d:3f:a4:6a:40:52:f0:7c:2b:8f:
ed:cb:ac:cc:c3:dd:e3:cc:2f:9d:ab:27:4d:3d:01:dc:31:2b:
a8:ea:ad:34:56:11:31:ef:22:57:f1:5c:60:f7:18:2a:0b:a9:
af:dc:6c:0c:03:2a:e7:f9:56:1b:78:64:ff:02:1f:53:03:12:
10:23:b8:8e:11:85:d1:84:2b:a5:51:3e:64:ba:4a:5c:f9:9c:
a2:c1:71:1d:58:f0:a9:04:70:0c:86:51:b3:7e:cf:ca:19:74:
00:e7:c0:c3:39:5d:fb:24:0d:55:72:44:76:7b:4c:76:27:28:
24:4c:12:29:f9:88:5d:6d:1b:b4:51:74:df:62:67:30:bc:c3:
db:41:35:90:d8:4a:76:37:f1:6c:86:c3:c7:33:df:db:73:08:
e0:bf:17:db:49:b8:42:57:99:96:d1:cf:bf:74:97:d5:09:e6:
58:40:0d:d1:1e:19:a7:0d:88:51:f0:9f:69:d8:66:92:bb:9d:
23:06:f0:3d:81:8b:f4:25:fb:33:2b:f8:15:88:17:ac:e1:23:
19:2f:87:1f:7d:fa:a9:62:51:33:46:33:d7:56:91:a7:02:d7:
42:b1:12:4d:a8:62:cd:fc:e4:e0:dd:83:bb:70:d3:cb:9d:05:
6e:6b:f6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:12 2024 by rpki-client on console-fra.rpki-client.org