Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5p8rafSpWlIeGPsz5nk_Rn4DG8E.cer
File: 5p8rafSpWlIeGPsz5nk_Rn4DG8E.cer (raw, json)
Hash identifier: 2tWGTPfcnXe+gpncNh+IZBU8SBdSB9AbxxI2vJGBWqw=
Subject key identifier: E6:9F:2B:69:F4:A9:5A:52:1E:18:FB:33:E6:79:3F:46:7E:03:1B:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86EF23CF5A237DB293C318A3847555A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/5p8rafSpWlIeGPsz5nk_Rn4DG8E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 94.142.250.0/24
IP: 2a12:5940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f2:3c:f5:a2:37:db:29:3c:31:8a:38:47:55:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e69f2b69f4a95a521e18fb33e6793f467e031bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:a3:90:e0:90:0d:32:8a:1e:b8:25:0b:cb:
23:e5:5a:03:31:5a:a4:0d:7e:1d:e3:cd:9a:c3:a7:
9f:1b:09:ac:7f:d6:af:ae:d2:e0:a4:1c:53:f6:c9:
19:09:a9:9a:5b:6c:7f:b9:bc:1e:da:9c:f9:a1:be:
17:9a:b0:d4:a7:91:76:b5:0c:ca:96:7a:9e:f1:25:
b9:a3:ea:a7:d1:62:a8:13:d2:73:57:cc:db:07:fd:
92:20:bd:24:ea:92:fa:58:9b:1c:33:d8:3d:8b:a4:
f9:81:d3:a4:8e:64:73:47:55:ab:6b:be:eb:be:a5:
7e:01:ca:3c:ec:af:3d:0f:87:f2:00:80:5c:f6:08:
87:6e:63:0b:11:15:30:cf:ff:82:6b:85:2e:2e:7b:
f1:44:f5:b2:2e:f8:39:41:05:c1:61:47:5c:15:a0:
b2:a8:68:10:75:38:7e:e8:f1:f7:58:ae:ab:9a:c3:
98:7d:2e:d8:b4:9a:af:4f:66:1f:c7:fa:99:dd:24:
6c:f1:fb:ef:d5:46:8c:25:55:e5:46:6b:8c:a0:6d:
90:39:99:0f:b2:d2:57:cc:cc:9c:9d:76:de:5f:64:
8f:3f:14:a7:fd:32:c4:c1:66:3b:0a:d5:b7:07:5a:
53:f9:3b:42:10:3d:b3:e0:b8:ff:f7:2e:bb:b9:e7:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9F:2B:69:F4:A9:5A:52:1E:18:FB:33:E6:79:3F:46:7E:03:1B:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/5p8rafSpWlIeGPsz5nk_Rn4DG8E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.250.0/24
IPv6:
2a12:5940::/29
Signature Algorithm: sha256WithRSAEncryption
83:6f:ba:22:c2:36:10:2e:6f:48:9d:bd:4a:dd:eb:bb:6d:54:
4a:94:c3:8d:e1:a5:ab:cc:90:85:ac:ae:29:ee:00:ad:18:50:
e3:2f:5e:90:1e:ef:fc:0f:d0:92:be:a9:c0:6b:e1:19:a2:f1:
27:7b:f3:78:f3:55:5f:1e:a8:4c:00:88:46:6c:c4:b1:85:fc:
4c:8d:a3:47:49:30:0f:36:02:4c:30:78:6d:e3:a7:b4:42:bb:
6d:01:78:32:e0:33:40:8f:32:01:0b:fd:82:5d:8f:92:2f:8a:
15:d1:86:d9:a4:10:c5:b3:c6:9d:33:74:7f:28:dc:be:1a:68:
6c:42:78:5a:4a:ad:e2:47:26:ad:42:e8:68:b3:5f:7d:88:d8:
65:42:59:07:67:5d:05:39:c0:2b:de:82:98:04:fc:29:6f:58:
9c:ec:1d:d0:91:15:17:48:56:ca:54:c6:5f:9a:ee:47:0e:ae:
65:71:50:fd:9f:3c:1b:e2:1b:f6:57:05:74:46:e3:e4:43:b6:
ce:a4:ff:6f:c7:e5:75:ef:06:4b:aa:10:c1:7b:31:8a:0b:f8:
fb:04:11:b6:e0:30:1a:8a:63:00:d5:00:2b:af:cd:12:bc:a2:
84:99:60:ad:41:1d:57:fe:c3:68:56:7b:2f:ea:47:eb:0c:58:
68:b4:97:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 16:49:45 2024 by rpki-client on console-fra.rpki-client.org