Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
File: 8VCW_jOQRJyTboVwYdSmll1AijE.cer (raw, json)
Hash identifier: V7JW/DC/RUilwWHpuPlr/uC/zVS96im8IhEi6kE+Jcg=
Subject key identifier: F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA99BCBECC11FE332091DEB8180E2DE6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:35:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.42.193.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:bc:be:cc:11:fe:33:20:91:de:b8:18:0e:2d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f15096fe3390449c936e857061d4a6965d408a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:54:5a:ce:35:1a:86:8a:9d:15:00:14:e0:
0e:ed:35:82:c6:d3:a8:f2:a1:1f:63:b7:fe:b0:da:
38:dc:8e:b1:2c:d2:4d:b8:91:7b:f8:59:f0:c8:4c:
04:74:4e:33:a9:0d:71:6e:93:71:02:9b:53:d6:e3:
32:90:d1:e4:fd:bc:44:02:14:30:b9:2d:25:8e:56:
b8:bd:f1:a8:76:dd:dc:04:19:05:5c:02:e9:05:eb:
d9:ca:04:ee:75:63:94:a5:df:73:76:c4:2d:70:85:
b2:73:25:66:e2:8b:02:c7:36:b4:e9:70:f3:27:97:
30:bb:6b:f3:13:d5:50:32:14:d3:4a:84:28:01:1f:
80:0c:e7:88:4c:47:ed:40:dc:83:ce:b0:80:a9:a6:
9c:4b:df:d0:02:7b:1c:9a:c6:81:5a:bf:66:24:9c:
8d:38:db:d3:f7:39:92:65:ba:4e:29:e7:36:5f:cb:
0e:35:64:7b:6f:8e:bf:d2:22:56:b3:f1:cc:8f:35:
be:aa:98:52:17:92:e7:76:20:79:0c:86:85:d2:b7:
ac:1b:d5:06:05:83:ea:ea:b4:3c:4a:59:c8:ae:e9:
ab:e6:35:41:ba:9f:8d:8b:92:2a:c5:2e:14:6b:c4:
0e:64:34:eb:1d:6e:ad:92:4c:d8:30:96:9d:d9:ed:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.193.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:36:8c:34:5e:9f:aa:59:4e:a7:3b:06:93:eb:50:cb:22:55:
73:7e:08:1c:16:41:7d:5c:03:9c:40:57:2b:e2:81:7a:f3:81:
43:a2:11:8e:01:39:e3:1e:2d:1a:36:02:43:24:de:85:7e:6e:
44:a8:ba:3f:21:1d:bf:e0:b8:86:18:6b:b2:de:34:4a:36:78:
a2:e0:85:95:55:d1:7e:39:a0:8f:2b:44:6a:30:3a:87:30:5e:
3d:2c:32:d8:95:f9:ef:3c:dc:8d:b9:df:f0:2e:36:4e:d1:dc:
d8:9f:16:23:d3:51:63:70:4b:d6:cb:ac:73:ee:0a:b1:2b:d5:
5b:a4:ce:f1:1e:84:0a:27:00:6c:38:e3:9e:c0:d0:56:00:09:
46:f9:3f:45:9d:f3:b7:9e:52:1a:ec:72:03:23:8e:b2:6a:29:
86:e5:94:41:29:a8:e9:0f:95:3d:68:38:61:6a:ec:0f:d1:a4:
be:dd:b7:2c:84:52:ed:33:30:47:e8:78:a5:db:dd:49:a3:cb:
a3:49:bf:bf:b6:ae:8a:da:63:fd:3e:d6:73:39:5f:e5:f0:00:
80:3f:bf:ad:62:00:c4:ec:55:92:69:33:fa:97:19:31:8b:57:
85:99:5c:a6:fe:01:c5:fe:ad:24:97:94:9f:3b:22:ae:10:4a:
ac:1a:b6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 20:51:33 2024 by rpki-client on console-fra.rpki-client.org