Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
File: 9XGHM6rUPvapm9jZUEog3YkCLo8.cer (raw, json)
Hash identifier: zhlJEelaPkhPQoyNTm4WXG8z5qMlTdsSUtQTDxBKu9M=
Subject key identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB480F90B3349D51FA43CEBDED5AE8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.28.120.0/22
IP: 195.206.248.0/23
IP: 2001:67c:22b8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:48:0f:90:b3:34:9d:51:fa:43:ce:bd:ed:5a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:de:b4:5d:8e:b2:cd:e1:e6:26:01:93:eb:1e:
17:bb:f0:77:0e:1f:44:82:ae:b0:63:7d:5c:38:1d:
2e:d6:f9:06:07:4c:82:4d:3b:62:26:85:25:ee:b0:
36:8a:aa:a8:d6:97:34:0c:38:68:02:58:3e:20:cd:
f0:e7:aa:9c:08:d6:78:c8:91:0c:9a:b0:3c:9b:81:
ee:d8:0a:b6:3c:e7:6f:6f:20:2d:b9:f3:0f:1e:99:
e5:cc:42:be:3a:f9:67:b6:6c:2b:4d:09:63:65:16:
70:d8:56:ca:d6:2d:c1:31:9e:9f:57:29:80:a9:61:
bb:ea:78:d6:7c:b4:73:c4:ef:b3:10:bb:2d:d8:cb:
22:25:a8:47:60:52:da:a3:46:6a:0a:7f:0d:b2:a7:
f4:d0:f2:bf:59:b7:fd:42:b9:b8:28:fe:d2:dc:7e:
2e:a7:93:1a:0f:b6:d0:aa:be:20:2d:44:bb:5d:84:
b7:b8:7b:bc:04:2a:c9:a1:73:b6:21:47:c0:35:29:
26:f7:67:09:a7:9b:89:0f:02:e1:24:8d:07:59:68:
18:8e:92:fc:98:a7:94:ce:7b:8e:fd:0a:36:90:28:
1d:2f:f3:db:99:dd:0e:87:e3:81:6f:02:ff:9c:6f:
e4:bb:e4:9a:2d:ce:1f:a2:b0:e7:ff:a8:f1:be:3f:
aa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.120.0/22
195.206.248.0/23
IPv6:
2001:67c:22b8::/48
Signature Algorithm: sha256WithRSAEncryption
61:c2:1f:d2:20:ee:4f:b5:98:e8:d0:5f:46:57:3c:bb:3c:c5:
0c:cb:aa:a7:87:12:9a:22:9d:2e:36:cc:c1:53:db:41:e7:d7:
39:0a:91:50:29:46:17:be:5c:69:29:19:2d:e7:b3:3a:00:90:
93:65:a4:e4:3c:b0:e0:ce:e7:3c:a0:e4:a4:79:1f:0e:48:ef:
63:0b:ec:50:00:a4:f4:24:e5:74:f0:c5:4c:68:32:ef:ea:e7:
f2:82:7a:22:2b:e9:f9:0d:d4:34:5f:7d:52:3e:09:b5:c5:40:
85:3a:30:86:74:09:84:7c:d8:f8:d1:49:af:49:4b:c8:c2:2a:
fd:20:17:75:a4:19:2a:11:da:d4:be:39:4f:57:b4:84:be:9a:
c7:9e:2c:5e:ce:7b:1d:51:35:87:22:e9:f3:d4:a1:09:a2:e4:
7c:36:d5:1d:36:82:7b:96:9f:d8:93:11:21:9c:39:d2:b1:6f:
df:ce:44:68:e0:1d:b0:c3:61:15:ce:e2:67:89:83:80:1d:62:
22:fd:36:2c:f8:90:27:a5:49:1e:3a:e2:43:41:04:e8:65:52:
f6:41:ec:60:9d:a2:58:12:1a:c1:95:e2:76:a3:f8:f4:8a:56:
ad:06:29:b7:5e:c7:36:64:61:d2:e9:8a:20:dd:dc:35:25:34:
5a:43:5c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 21:23:31 2024 by rpki-client on console-ams.rpki-client.org