Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
File: 97NANTBJjYJfLniKB2UDvJ3OFXQ.cer (raw, json)
Hash identifier: xP5UsAWIHGvBO5DYrckHwVh3JWg/Dc/wgHoJaiKiYvk=
Subject key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F05F6434C9A297B17DD54766AF44DEBF8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 22 Apr 2024 13:19:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.77.68.0/22
IP: 2a05:61c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:05:f6:43:4c:9a:29:7b:17:dd:54:76:6a:f4:4d:eb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 22 13:19:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7b3403530498d825f2e788a076503bc9dce1574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:a5:59:70:d6:6b:9f:88:42:90:c7:78:aa:
c1:ea:f1:79:bc:43:04:ef:9e:67:f3:1c:d9:b6:5d:
ad:47:9d:b5:ee:88:9f:08:f2:64:37:40:e0:d5:26:
e3:ef:ec:f6:0c:2d:1c:24:f9:9e:77:a8:fa:ce:80:
aa:ab:d4:0b:82:3f:51:ab:9c:4c:71:5c:06:1f:df:
8d:ac:78:48:5d:24:f6:40:02:94:87:98:7a:c6:74:
e0:fa:4c:a7:18:5a:61:8c:0d:17:ae:7f:b9:50:0f:
d7:73:7f:94:46:75:22:8e:d9:0a:ec:45:3b:7e:f6:
fc:aa:ef:11:e7:f5:f1:38:f6:6e:8b:b4:ee:81:39:
a4:67:37:df:81:6b:e5:6f:8c:14:55:93:3c:c1:4c:
47:f7:d7:bd:eb:59:f6:40:c0:dc:8d:ee:5c:fa:12:
33:4d:41:32:60:96:e8:6a:fe:f2:c5:bb:9d:49:ce:
37:e2:95:a4:c6:63:8f:3e:6e:4b:13:23:54:3e:60:
d8:16:29:92:63:41:ea:72:e9:5e:fe:e2:46:c8:20:
3c:1a:45:4b:9a:5c:47:ad:13:d2:29:af:02:0e:00:
0e:fe:fc:25:9b:7e:83:a8:63:66:67:40:84:e0:4d:
e5:c4:a7:6a:81:e1:aa:21:d8:ec:b8:e7:21:d8:14:
e0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.68.0/22
IPv6:
2a05:61c0::/29
Signature Algorithm: sha256WithRSAEncryption
2b:88:64:07:ab:4f:ae:07:ff:b2:c5:11:91:db:73:6a:30:43:
b5:0d:aa:a8:d6:9e:9a:7d:5d:f5:95:3d:88:d2:39:f1:79:ca:
34:70:1c:2b:3d:20:38:be:ac:8f:04:61:9b:c5:c8:19:6f:1e:
b9:d1:3b:85:81:f0:fd:4b:5e:34:7d:53:d8:86:3c:20:ae:b0:
ed:7b:d2:74:60:0e:9d:84:53:91:90:67:e2:46:1e:31:b2:07:
da:f5:67:9a:de:81:ce:c1:76:23:8b:30:25:b4:e6:7a:df:d2:
7c:82:f6:a7:f8:bc:f0:76:55:94:10:c9:7b:75:41:72:81:4a:
6d:6f:67:fe:0f:70:e6:52:2f:95:a8:8a:1c:db:b9:09:ca:57:
17:7b:a1:f3:55:da:33:11:86:f1:c7:52:27:4e:c3:5b:2c:c5:
c2:b5:f4:57:f9:1b:62:be:a8:b4:25:f3:fd:aa:df:32:f5:fb:
e3:fb:e1:34:bc:a3:44:5a:d9:e0:b9:05:e5:2f:48:b9:e2:92:
d6:0c:28:27:f8:cd:f4:86:58:70:3c:69:f5:16:14:c3:af:50:
c0:b3:4e:e2:3d:1b:41:be:10:20:cb:58:3b:af:b8:c0:4f:36:
f7:bd:c6:ca:b7:15:97:64:74:1d:6b:86:19:5a:29:a2:a3:8f:
b2:d1:0a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:40:38 2024 by rpki-client on console-fra.rpki-client.org