Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
File: 8NWfEh_H76DBC33WFNlah1bVNgY.cer (raw, json)
Hash identifier: BmlUew5ryYNQnE6/bdrtIL+RG4YQe/uLaFGQch0aw6E=
Subject key identifier: F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DCDCC294A4C1831D600373D191AA53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:29:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.104.144.0/21
IP: 45.10.98.0/23
IP: 2a01:76c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:dc:c2:94:a4:c1:83:1d:60:03:73:d1:91:aa:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:89:eb:1d:ed:75:46:58:24:f5:ec:8c:93:78:
9c:d6:d7:91:d6:2f:c2:42:06:4f:c9:da:8f:f3:14:
94:b3:8d:b0:28:ad:7f:33:c3:28:4c:ef:50:62:82:
ab:47:c7:ae:d0:56:08:c8:6c:ce:01:61:c1:1f:3b:
07:26:12:72:01:90:ec:a9:be:39:72:1b:28:77:fd:
64:69:4a:4e:fd:84:ab:fc:41:d5:33:02:c7:12:01:
d7:9f:21:0c:11:4a:58:25:53:66:42:bc:f4:c4:2d:
c4:6e:6d:76:f5:68:58:fb:e8:80:28:c6:84:b1:c4:
c3:b9:2d:ec:b4:35:ac:14:a8:f2:b8:61:a9:ef:e3:
73:db:7e:9c:74:7d:ae:e3:cf:22:38:e5:c4:75:5e:
0b:47:35:76:aa:51:a5:12:3b:7e:c5:a3:eb:8a:b2:
ae:b1:17:9e:a3:e3:90:ca:03:14:82:ba:1f:8c:9c:
08:b0:cc:de:ad:f9:1b:74:cf:0b:9c:1c:38:78:92:
bf:85:31:aa:c8:1e:8e:51:64:89:a9:24:05:00:1e:
01:b8:58:88:46:46:e3:d2:c0:44:1e:ab:1e:40:84:
6f:87:4e:0c:7a:32:62:28:da:34:e8:19:d3:44:2e:
2b:e6:c4:2d:66:69:40:2c:6b:57:ef:67:5f:43:39:
06:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.144.0/21
45.10.98.0/23
IPv6:
2a01:76c0::/29
Signature Algorithm: sha256WithRSAEncryption
b0:7a:2e:60:89:65:ed:79:0d:de:c4:3c:a4:a1:1c:94:18:d5:
c9:fb:83:69:45:34:f3:d1:75:d0:35:31:ff:41:6c:a4:82:31:
32:6c:8b:06:60:6b:b1:e8:f1:eb:16:23:48:79:eb:df:a8:2e:
9f:05:28:e3:a5:a1:95:01:5c:e0:61:2c:a8:d4:ca:1b:9d:71:
da:93:1a:bf:b6:3d:20:29:09:3c:1d:5a:e4:9b:fd:49:3a:7f:
50:ed:7b:5e:9b:27:c0:b1:e4:6b:19:71:f4:cd:9b:16:d5:24:
a3:9a:24:9c:12:ad:55:4c:28:05:56:9b:e5:1f:82:8a:dd:d4:
4a:8a:05:a0:0d:b0:9a:bf:ff:df:5c:90:d5:63:e8:b3:bc:44:
d3:29:27:61:59:d9:41:e8:15:1d:24:2f:61:27:6d:ec:ef:fb:
22:a3:13:cc:84:92:cd:b8:a7:bf:f6:c8:4c:9e:f8:15:75:1f:
8c:93:92:65:ae:b8:6a:36:51:8d:92:bf:0e:5c:83:ab:d9:53:
a6:23:a5:75:77:92:8d:d9:8e:f5:83:50:ae:8b:3b:83:77:3a:
9f:67:df:39:45:b0:02:fc:46:18:12:8a:79:a2:5f:84:18:b6:
e4:c6:06:78:07:51:09:84:86:0b:42:e3:be:14:64:78:9d:39:
c0:0f:25:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:09:57 2024 by rpki-client on console-ams.rpki-client.org