Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8DUopQRSAPYU2ivzpbzSYkyPc6w.cer
File: 8DUopQRSAPYU2ivzpbzSYkyPc6w.cer (raw, json)
Hash identifier: TLDDYRWURpsoainv+yywM2h1c1u1qC4at9lOyJ12JNc=
Subject key identifier: F0:35:28:A5:04:52:00:F6:14:DA:2B:F3:A5:BC:D2:62:4C:8F:73:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA29116785BAE46A527962994E8AC628
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/986946-58b8-49f1-8bb4-7f955e68e693/1/8DUopQRSAPYU2ivzpbzSYkyPc6w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/986946-58b8-49f1-8bb4-7f955e68e693/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 217.28.140.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Apr 2024 14:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:11:67:85:ba:e4:6a:52:79:62:99:4e:8a:c6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f03528a5045200f614da2bf3a5bcd2624c8f73ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:07:50:1f:bf:33:6d:1b:8e:7a:c7:94:d2:3f:
d5:a4:de:88:01:f6:44:e9:16:37:6f:f8:cf:a7:0c:
c4:25:f0:51:15:ee:02:e0:6e:6b:10:bb:6f:8a:ec:
53:cd:f9:eb:01:e8:a6:ea:93:12:8a:12:15:35:09:
db:b9:a0:22:7c:b3:04:b5:8a:8d:ca:da:f7:5c:74:
21:ac:c0:34:bc:63:22:dc:3e:d7:95:5c:eb:5b:dc:
73:e4:d8:f5:56:8e:10:d2:24:02:85:f3:1f:44:26:
40:85:70:e7:51:72:32:eb:31:8d:7a:ff:f6:cd:a4:
f2:15:a7:5b:b8:18:8a:64:5e:1d:d6:97:5f:dd:ae:
4f:41:87:9c:60:50:80:9d:6b:f1:c1:ae:62:1d:eb:
c1:93:30:80:80:d4:a3:26:b7:90:47:83:a8:f9:97:
17:7d:cb:9d:d2:c4:2b:0f:0a:bd:a6:81:8b:36:2d:
27:83:63:64:ca:79:79:12:5d:64:bf:9b:00:09:98:
ae:a4:9a:c2:4c:18:56:a1:54:a8:a3:dc:7d:30:b5:
78:62:62:26:88:4a:81:d0:0c:7d:fe:03:37:63:9f:
3e:02:df:e9:90:09:c2:89:d3:99:c3:5e:37:50:c1:
e5:82:4a:e2:c7:ec:2d:d5:07:35:a9:8d:a4:64:8a:
01:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:35:28:A5:04:52:00:F6:14:DA:2B:F3:A5:BC:D2:62:4C:8F:73:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/986946-58b8-49f1-8bb4-7f955e68e693/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/986946-58b8-49f1-8bb4-7f955e68e693/1/8DUopQRSAPYU2ivzpbzSYkyPc6w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.140.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:55:03:9a:98:6b:e5:63:17:6d:d3:3f:d1:01:c5:b0:96:33:
7c:11:41:86:1d:74:1c:b5:30:64:84:df:c4:46:b0:ce:0a:c8:
0f:54:48:3a:21:22:22:7e:f3:40:81:65:3a:70:19:df:84:f8:
88:e2:5f:65:c4:a9:1f:05:ed:d6:67:8c:40:be:fd:21:ee:a7:
55:7b:5c:dd:57:21:dc:c7:4c:ec:fe:e9:69:27:e0:a9:fd:ee:
9b:ce:e6:03:4b:b2:50:4b:a0:78:9d:f5:f3:2b:e6:ab:bb:48:
54:05:66:e1:10:45:da:63:db:20:4d:87:f9:4a:e6:96:e1:c5:
90:44:35:c9:bc:2d:59:79:83:3b:3d:eb:17:9b:e5:e6:39:f7:
9c:9e:66:67:78:60:78:be:81:76:70:26:65:61:0e:e4:3e:e7:
09:1f:18:63:d1:eb:88:04:fa:29:41:82:09:11:55:28:76:59:
d7:c7:3b:24:9d:64:2c:3b:77:76:72:db:3a:5b:e6:94:5d:61:
8a:67:75:1b:83:48:df:53:b0:1f:64:ae:41:c4:9b:82:7d:da:
b3:28:ee:17:d2:61:c3:28:f8:18:5f:c8:a5:b5:77:81:7c:a8:
b5:b3:07:8e:29:c9:e9:18:8b:75:5a:8c:5d:0b:ae:50:f6:66:
06:d2:e7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 19:12:28 2024 by rpki-client on console-fra.rpki-client.org