Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6hnxNhI41O6MRqpBsJwyLGLIh_0.cer
File: 6hnxNhI41O6MRqpBsJwyLGLIh_0.cer (raw, json)
Hash identifier: Tn4VcDHwf4YOUXNofRvv3dl0/wJvAAPyp5uBm3R8ZfI=
Subject key identifier: EA:19:F1:36:12:38:D4:EE:8C:46:AA:41:B0:9C:32:2C:62:C8:87:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B78ADF7528664FBF2BD9A9984164C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.23.112.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:8a:df:75:28:66:4f:bf:2b:d9:a9:98:41:64:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea19f1361238d4ee8c46aa41b09c322c62c887fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:7a:14:e7:de:f5:ca:87:87:cb:e1:e1:15:
fe:aa:8d:8b:a9:ef:3e:14:ec:5e:dd:5e:f5:cf:70:
e3:e0:73:1c:12:d6:64:53:55:c0:d7:ab:0b:80:b3:
14:96:74:87:d0:cb:77:61:79:be:62:71:1b:26:4d:
02:50:39:f2:e8:7b:bc:b0:d3:91:87:4a:f3:5d:28:
72:78:72:75:86:cd:b3:4e:7c:ae:d5:ab:fd:a1:e1:
83:39:16:c0:1d:d2:79:15:b5:48:8e:67:06:f8:e4:
06:d0:b7:1b:a0:47:c9:34:49:80:2b:1c:aa:f9:84:
91:c7:ea:4f:6b:e5:04:ec:9a:8d:1e:15:87:82:74:
1c:58:df:bc:7a:f9:26:49:d1:f7:07:18:a7:44:01:
3c:7b:ac:f4:8a:df:19:50:91:59:af:51:19:cb:dc:
38:0b:cf:54:26:70:a3:d8:70:7b:43:c3:23:44:57:
f0:34:e9:29:b7:e6:2d:e1:2d:1f:0e:b7:98:40:71:
39:44:d2:87:d9:b2:ed:e3:39:85:7c:6a:3c:fc:e1:
d1:ed:ae:01:71:cc:b9:c6:40:6c:44:a8:95:f4:f8:
80:4e:5e:bd:c0:2b:90:0b:27:23:9f:c9:56:7a:48:
cc:66:2d:13:d0:c2:3a:3c:b0:f0:90:18:94:89:2a:
16:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:19:F1:36:12:38:D4:EE:8C:46:AA:41:B0:9C:32:2C:62:C8:87:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.112.0/24
Signature Algorithm: sha256WithRSAEncryption
57:06:c4:43:47:cb:1c:e7:07:08:2c:2a:a0:15:9c:61:96:71:
8d:cf:60:86:8d:8a:10:71:66:55:13:c4:e8:2e:13:37:35:fb:
f5:62:9a:ac:ea:a7:2f:a9:e2:df:52:b9:1b:15:d8:12:1c:64:
e4:1d:90:72:b3:30:b2:50:1c:fd:83:77:03:10:b3:53:d7:c2:
ff:c6:b7:9a:92:4f:68:8b:a5:f7:90:89:43:c5:89:2f:5c:07:
50:8d:40:b6:01:23:38:33:77:83:f3:e5:6e:ea:2d:6e:de:ad:
43:a8:f2:e5:5f:c6:8f:05:66:17:44:ff:7e:58:42:46:7f:5f:
63:aa:09:0f:97:d0:07:5b:fc:4f:77:ed:a0:f6:73:aa:db:fb:
c9:72:fe:aa:d2:39:f0:16:02:22:9a:7c:ad:d0:5c:a5:f6:11:
d1:8e:df:76:09:27:a4:ca:e1:a4:2e:ab:52:56:4c:d7:ad:a6:
c9:a2:f6:e0:3a:e5:a8:98:9a:40:85:ef:33:eb:e6:89:ac:05:
34:c2:ca:88:ce:3d:9c:fe:60:91:64:f4:57:43:a1:47:e8:b0:
8c:02:4f:6a:06:4e:64:fa:9c:3d:fe:58:8e:3d:cd:18:c5:f2:
81:85:0f:7b:a6:0c:5c:50:fb:d6:fc:38:de:b4:3c:70:ef:c2:
0e:ef:3f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:21:00 2024 by rpki-client on console-ams.rpki-client.org