Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
File: 65fOljUzDxRxFMZG72qTR9aJFjs.cer (raw, json)
Hash identifier: dp8zonPeC+2i/7oaSvDSUVuHi3D22/X0n6lIHt/Y0wQ=
Subject key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E3F6AECA5A6826BF6E0E5912A270A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 130.192.96.0 -- 130.192.159.255
IP: 130.192.168.0/21
IP: 130.192.192.0/19
IP: 130.192.240.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:3f:6a:ec:a5:a6:82:6b:f6:e0:e5:91:2a:27:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb97ce9635330f147114c646ef6a9347d689163b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:04:5d:6b:97:25:01:39:38:a0:4b:d3:f5:
66:70:60:57:4e:13:0c:43:21:5b:95:60:b9:9a:21:
38:8c:24:f2:7d:37:ef:b7:c5:d2:cf:f0:c0:40:7c:
be:a7:d6:a9:4d:23:a7:f6:44:dd:91:1e:6d:45:66:
a4:a3:14:9f:59:61:8b:61:56:3a:47:c5:be:50:d9:
fb:e9:ff:d4:3c:ed:fd:db:c9:df:19:74:13:e8:00:
9d:bd:06:db:6f:41:b6:1a:36:13:04:27:c7:8d:25:
8b:9c:8a:23:f7:41:8c:b8:1e:da:f3:8a:bf:07:da:
eb:58:2d:22:55:1c:a9:39:83:71:d3:ea:07:19:cd:
c4:92:b0:a2:3d:27:71:b2:d6:82:56:cc:d5:b1:b4:
10:5f:25:7c:ad:c1:96:34:11:ce:b2:04:9f:95:26:
07:87:fe:e2:c1:3c:d1:f7:1b:ac:b3:37:b6:ac:64:
b1:af:d4:70:55:b2:e9:ce:6d:b0:5e:9a:f3:6a:18:
bf:19:eb:6a:90:47:94:9e:00:0f:4e:ba:15:7a:71:
34:74:27:be:30:f4:86:a1:f0:da:3d:31:52:3f:62:
7c:5d:7b:3f:9e:47:85:fa:d7:c6:e0:2a:b7:09:2a:
d8:d7:39:40:78:81:9b:a8:bb:72:96:12:f7:cc:b9:
4b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.192.96.0-130.192.159.255
130.192.168.0/21
130.192.192.0/19
130.192.240.0/20
Signature Algorithm: sha256WithRSAEncryption
42:32:40:fa:bb:4d:7f:5c:58:17:86:96:5d:2f:f1:78:10:61:
12:97:ea:5e:ea:9f:78:fb:b8:7a:b7:fd:8c:66:a1:06:8c:2c:
b5:56:22:36:7a:eb:d8:d8:27:a2:55:9e:71:3b:b0:56:85:8e:
c6:6d:2c:b3:17:d8:78:7e:63:cc:04:e4:7a:01:2b:f4:29:e4:
90:01:35:47:2f:0f:88:bc:47:f5:7f:a8:f5:8f:17:72:23:ab:
de:d7:2f:51:a5:ba:69:fe:2b:07:bc:98:21:c4:cb:91:b9:4a:
a9:b5:88:42:33:42:8c:03:27:d4:7c:d3:e1:aa:33:09:81:94:
55:6a:8a:9e:1f:70:97:37:18:cd:00:46:a2:0f:fa:8c:ee:70:
f6:5b:41:8e:ba:7e:83:cb:82:ae:86:44:9a:56:dc:d8:1f:83:
34:b9:e7:42:41:86:0f:29:85:1c:6c:cc:10:ac:e9:08:a6:bb:
4a:4d:a0:5a:50:34:73:97:c5:63:42:3f:bc:b9:1b:27:f3:dd:
cb:4a:e7:8f:fe:3e:50:2a:95:22:de:92:dd:da:f8:ec:4b:98:
d1:84:b3:9a:50:6e:02:c5:b6:1a:c0:c8:c6:27:26:14:df:6d:
a0:42:15:d1:e6:7b:9c:48:00:71:dc:3b:44:42:b3:69:74:ba:
1e:cd:12:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 16:56:28 2024 by rpki-client on console-fra.rpki-client.org