Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8ZmXmuaii1jqiAmkmPax6WKYJZ8.cer
File: 8ZmXmuaii1jqiAmkmPax6WKYJZ8.cer (raw, json)
Hash identifier: j8MZi8q6fwohG4LU3DRP0Pq7TMf6GDchT5HKea6K8VM=
Subject key identifier: F1:99:97:9A:E6:A2:8B:58:EA:88:09:A4:98:F6:B1:E9:62:98:25:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500FEF6E4C8720C56CFBF60FECFCD40
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/2af198-8fe4-46e0-9a68-8f758a927bd6/1/8ZmXmuaii1jqiAmkmPax6WKYJZ8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/2af198-8fe4-46e0-9a68-8f758a927bd6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.19.190.0/24
IP: 2a12:2ec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:fe:f6:e4:c8:72:0c:56:cf:bf:60:fe:cf:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f199979ae6a28b58ea8809a498f6b1e96298259f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:fe:ae:6c:92:3a:2e:97:57:ab:31:e8:bb:
70:af:9b:a6:6f:b9:b1:42:9d:a2:59:7c:2c:aa:ea:
31:54:80:f1:cf:15:23:9b:2b:92:5d:f7:79:41:a5:
8d:8c:19:7e:d7:23:dc:32:fd:f6:3b:96:8e:b4:c5:
42:cd:ad:1e:72:42:9d:bf:c0:f7:dd:3b:76:53:97:
9c:05:d4:de:f0:97:45:6e:73:24:ec:3b:df:05:7c:
c8:6f:8d:5a:19:1d:92:ec:1e:e0:23:52:54:c3:ce:
97:e2:4f:98:16:62:ec:91:df:ed:98:e6:11:fc:b2:
f1:7f:7b:7b:76:dc:b5:c8:49:af:a1:d9:ad:7e:66:
1b:0a:33:f7:8c:8f:7c:75:bb:e2:d6:ac:a6:64:14:
a0:97:e4:55:3c:cc:7b:f8:24:ea:c8:e5:5a:42:8a:
be:26:7c:24:bc:2b:22:eb:74:5c:9a:63:ea:10:bc:
42:ab:2d:53:bf:63:d2:a8:44:61:ed:29:bc:7d:41:
ac:c2:13:50:ea:b9:87:b6:6a:38:5e:8b:b2:5c:c0:
74:cf:f3:c0:fa:8e:e6:9b:2b:7a:48:d6:ae:a8:30:
5f:3c:d8:1c:66:2e:9b:09:4d:2e:16:bf:7e:b9:fa:
dc:48:b0:fd:89:d8:9f:d1:37:21:58:cd:f0:c1:70:
66:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:99:97:9A:E6:A2:8B:58:EA:88:09:A4:98:F6:B1:E9:62:98:25:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2af198-8fe4-46e0-9a68-8f758a927bd6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2af198-8fe4-46e0-9a68-8f758a927bd6/1/8ZmXmuaii1jqiAmkmPax6WKYJZ8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.190.0/24
IPv6:
2a12:2ec0::/29
Signature Algorithm: sha256WithRSAEncryption
71:b8:32:cf:8b:ed:5d:e9:0a:cc:73:ed:f7:37:57:2a:ef:8a:
f4:c3:92:5f:8c:00:3f:75:f0:f8:69:fe:24:d3:16:21:e0:e6:
c3:bc:2d:87:6f:0e:e3:f3:c6:b2:11:e3:7b:08:89:a8:f3:2a:
81:ce:51:0c:27:a5:28:f6:f0:b4:b7:40:76:42:78:57:f5:1e:
d2:37:f9:9e:d3:8a:53:ff:5f:58:f6:0a:44:1d:b7:46:fd:c3:
ac:97:11:bd:5b:99:8a:70:bf:2c:44:94:56:e5:27:98:32:62:
07:3b:e9:3e:5b:53:da:1b:02:46:1c:88:5b:f3:4d:0f:15:c3:
3a:f4:35:7b:0c:37:e7:f4:27:6f:75:87:b8:fb:c5:64:db:14:
c5:bb:05:9b:a3:a6:1f:58:32:92:4c:0a:98:30:8c:b8:c0:03:
8a:60:d1:6e:71:68:f2:a7:b3:03:34:e9:82:aa:d6:ff:c3:41:
81:aa:9f:f2:5a:32:c2:e5:90:85:54:23:b1:05:c4:0c:cb:27:
0e:5f:03:7b:58:61:8a:1e:dd:c9:c6:6a:f9:e8:6a:fd:f9:20:
83:f0:4b:77:6a:00:49:3e:52:4e:c5:05:b9:8d:cf:39:3b:55:
9c:ed:42:2c:4b:94:63:28:87:1b:b1:82:6a:70:9f:90:44:e4:
56:28:ac:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 10:15:38 2024 by rpki-client on console-ams.rpki-client.org