Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
File: 9naIfyLs2o0HSBWgvPkfr4GUKr0.cer (raw, json)
Hash identifier: T1DSJvB3dwyH60c3sEp/G9d79/SdGLm+j51mCU3oswA=
Subject key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CE8BDC6BEF1682C940F56DA98D94E610C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 08 Jan 2024 11:03:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 46.16.38.0/24
IP: 2a14:6480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:bd:c6:be:f1:68:2c:94:0f:56:da:98:d9:4e:61:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 8 11:03:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f676887f22ecda8d074815a0bcf91faf81942abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a8:eb:21:02:a4:c3:cd:f6:76:c5:1d:b7:66:
96:95:57:8b:11:35:e3:d0:7d:ba:4c:4f:60:64:c8:
eb:aa:40:4a:e7:b4:02:b2:46:a6:34:da:6f:43:ba:
89:60:5c:ba:f0:48:4b:b7:7d:9b:76:0c:ef:95:cb:
0e:28:66:d7:6d:da:88:38:8d:b3:b3:30:8e:60:6a:
09:6a:02:31:21:9d:46:0f:26:0f:23:25:f8:91:1e:
4f:07:f8:8b:14:60:3b:d5:58:6c:9b:fd:39:f5:ef:
19:ce:d4:e1:b3:a6:39:52:69:1b:62:93:3a:a8:9b:
1b:6a:31:42:e3:a6:f5:e0:be:d7:a6:d8:88:42:10:
69:31:79:4b:08:e6:1b:c6:c0:a9:b1:96:82:58:ed:
84:ce:37:7c:2d:26:fb:ae:58:af:98:9f:c8:4d:5b:
99:cd:a5:ae:f1:f5:01:ba:bf:20:ff:37:cc:e7:de:
51:57:2b:16:07:74:77:6e:b4:3f:87:3a:4c:a0:44:
5b:0e:7b:ff:b1:ba:23:6e:97:32:3a:e2:3c:f9:1e:
57:76:90:20:6c:86:fa:55:d1:f3:90:2f:27:59:11:
d9:fc:ca:7b:f4:b8:9f:60:ed:52:f7:a9:93:8c:f6:
2c:c6:fa:32:8c:08:34:b7:1c:ac:9e:ad:8a:e3:06:
2d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.38.0/24
IPv6:
2a14:6480::/29
Signature Algorithm: sha256WithRSAEncryption
4a:51:17:90:89:df:c9:80:d4:d8:a4:0a:08:be:6e:02:70:1f:
7d:9f:32:f9:ad:3e:dc:b5:b3:04:5b:9a:8b:55:c8:c8:2b:b9:
33:be:dc:ed:ef:ac:c9:82:53:31:4c:94:21:de:9d:e5:00:b9:
3b:5e:65:db:af:2c:a9:4b:98:58:7f:a3:f5:39:68:0a:e0:e4:
4e:ea:4c:ce:57:9b:41:8a:db:ae:0f:68:42:41:64:99:5c:75:
34:fc:13:cb:b0:df:ab:7b:9f:c6:53:0a:b7:ff:85:3a:a8:a8:
21:56:d0:27:27:e7:d6:5a:ca:83:32:f1:96:f5:ae:69:e6:7d:
df:9a:66:4a:62:95:ce:16:e7:4a:ca:0d:30:69:2a:3b:44:77:
36:fa:fa:bd:66:85:55:d5:27:d8:8f:52:ac:f3:12:0c:84:96:
92:57:62:7c:76:63:d6:f0:5a:f8:81:42:84:49:62:37:0f:17:
e3:7d:e8:49:8c:21:c0:b7:d7:86:27:a2:28:a8:68:d6:16:f5:
24:1f:00:6b:08:3a:d2:0c:6d:86:c0:dc:c1:37:53:72:22:3e:
67:25:53:3e:08:39:28:c4:60:9b:d7:c4:e4:dc:61:76:ad:0e:
51:34:76:a3:73:69:82:35:d1:9b:76:be:5f:fd:d2:5f:29:1d:
c2:07:82:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 20:58:49 2024 by rpki-client on console-fra.rpki-client.org