Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
File: 9kUNLQIT7kyfMYHv7rLWY_4NNls.cer (raw, json)
Hash identifier: gdlQ2CMsYuYAHJ3FKaVphOQh8bYvdBENDpvQOXd7BJ4=
Subject key identifier: F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC501012DBAC4E0A95CE4E9AA8FCF5B58
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.15.151.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:01:2d:ba:c4:e0:a9:5c:e4:e9:aa:8f:cf:5b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:18:58:98:79:99:d6:87:2f:aa:e9:f0:6b:c3:
22:8c:78:b1:63:74:98:e4:f1:29:d1:d0:d1:0f:99:
14:ef:8a:af:c5:a4:45:de:22:36:e4:25:db:31:cd:
25:a8:82:e9:12:ed:65:06:83:28:18:68:00:d3:2c:
22:b2:8e:a5:4d:23:b6:9e:15:de:8e:eb:a3:50:af:
bf:96:c3:ac:44:a8:86:c6:5e:6c:40:60:79:78:92:
19:61:35:8e:b2:79:79:69:9d:cf:31:f6:25:a6:e3:
cf:80:cc:58:10:3f:c7:e1:49:d7:e2:66:97:3a:a6:
70:3c:a6:85:6f:82:02:1b:56:63:20:13:e0:fe:bc:
ee:91:d2:c0:0e:40:90:5d:67:7b:58:bd:6d:a9:b4:
57:96:6c:bd:db:1b:be:a5:bf:39:58:4f:07:3f:d8:
bb:df:e6:63:f5:14:d4:ea:13:48:41:32:00:12:61:
92:27:29:be:16:f2:f4:31:ae:98:8a:1c:a1:f2:01:
10:ee:e5:5e:dd:e9:2b:15:fa:07:8c:30:92:b2:a1:
f3:b0:cd:66:18:8f:8e:38:e2:c7:0a:b8:25:f5:0c:
b7:ce:68:9d:df:49:5b:4d:7b:f9:5e:fd:fd:ca:06:
0b:c5:f0:81:bc:5c:fe:89:ff:2b:8d:64:ab:49:61:
ce:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.151.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:03:97:64:c4:39:04:20:63:ff:bc:18:04:0f:fd:6f:f1:75:
86:95:e4:32:a6:35:44:d4:e5:d1:da:9e:16:8f:83:a3:50:f4:
9e:27:b2:f7:75:c4:f7:ec:6b:1c:d0:e1:4c:69:70:9c:f1:ba:
a3:7a:4f:56:59:7a:0f:d0:d8:00:64:7b:92:cb:5d:52:af:9a:
e7:ef:05:5c:4b:fe:ad:a0:81:26:7a:19:c1:b3:cc:d4:24:6a:
ee:90:34:2c:c9:b1:1e:d5:47:16:dd:27:57:9e:9d:33:19:56:
d5:07:d9:60:a8:3e:4c:52:fa:1d:7f:9e:d6:37:0b:3d:65:e0:
f2:a0:87:6d:53:66:89:21:77:22:df:76:f2:d2:c6:8e:a9:11:
81:a9:25:f3:93:94:a8:c9:a2:f7:32:09:48:93:3e:8b:35:00:
90:cd:c0:b7:3d:76:c8:f1:53:8f:8a:ef:a7:d4:46:d2:44:c8:
62:1d:88:27:db:03:b8:94:b5:b7:d1:90:15:a4:78:01:41:f1:
48:35:e4:c8:da:0f:92:2b:84:cb:2e:b7:10:84:17:61:61:b4:
4e:30:1a:8f:ee:c3:f7:57:2e:44:4e:54:cb:f8:da:ff:46:59:
1f:91:6f:ce:3f:7f:7f:83:f2:35:7a:9a:14:d5:17:7c:3a:1d:
b8:02:87:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:12:58 2024 by rpki-client on console-fra.rpki-client.org