Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
File: A-pQioW8c6mqogOop7r5wWLm82w.cer (raw, json)
Hash identifier: NgflIdEYwOrRCAr9d3wb+8hDRFAq7SMJF6mnHi+qa98=
Subject key identifier: 03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7277319E937D072E2B847591B4926F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.55.100.0/22
IP: 2a01:8e20::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:73:19:e9:37:d0:72:e2:b8:47:59:1b:49:26:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ab:0b:5c:d4:8d:95:b8:40:da:4e:67:a8:70:
65:e6:64:15:62:bd:e6:f4:49:74:a8:b2:ac:d4:71:
90:c7:04:5a:7b:df:e1:4d:07:64:61:6f:e9:c7:6b:
cf:15:69:ff:45:53:34:e5:00:07:a7:d1:c8:f2:ba:
37:16:be:a0:d1:7f:c3:d7:ff:57:c9:a1:b4:be:49:
94:71:fc:db:c6:e2:4e:44:b9:e1:0a:b7:cf:4c:24:
e2:66:1f:bf:21:8b:cb:49:4c:8a:61:63:8b:1c:81:
36:ca:ce:56:fd:93:d2:fe:8d:46:cc:34:8b:c9:80:
ed:bf:3d:06:de:69:37:33:4c:99:15:c6:16:36:bb:
95:45:40:05:c1:cb:87:46:7e:29:88:23:eb:ca:22:
ad:cd:9a:f3:a3:9b:cc:2a:8b:ee:f7:63:07:58:15:
c2:38:16:d1:13:00:53:88:dc:54:07:5b:1f:28:73:
6a:19:e4:d2:c6:ed:f6:71:07:49:56:8a:4e:e5:2d:
e6:fc:53:16:d8:6f:62:ca:4d:24:51:68:3f:4a:d1:
52:5d:ee:9b:69:75:55:1c:29:30:ee:e5:8d:2e:10:
6a:ac:cf:96:bc:f6:05:7f:7b:6a:b6:b0:db:c9:d0:
ec:c4:d4:4f:e3:fb:67:10:cd:cc:d1:c8:07:a9:fa:
39:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.100.0/22
IPv6:
2a01:8e20::/32
Signature Algorithm: sha256WithRSAEncryption
0a:ab:b4:89:3e:fe:82:30:43:c5:84:92:48:ac:aa:ff:c5:9f:
07:b5:60:64:df:7d:e9:d2:50:b4:c4:f6:70:64:c4:9e:2e:0d:
d2:56:3d:67:86:9d:18:a2:9f:62:d6:55:f2:5e:a4:a2:55:72:
3b:9f:07:6d:cf:78:ba:e3:67:4b:cd:ef:95:d3:7e:ab:dd:32:
7a:ab:9a:98:a1:e5:ba:b4:ab:78:67:be:bc:48:2a:7d:8a:ee:
0a:cb:f8:40:4f:63:5a:a3:f1:74:04:98:be:71:24:94:6b:9d:
8b:ce:ca:e4:c1:06:ce:5a:b8:1f:38:78:88:7e:af:94:a4:b7:
bc:df:84:c0:6e:68:5e:18:51:98:78:21:1b:b2:4d:bd:2e:2e:
45:81:7a:8b:73:08:7d:8a:d5:01:5e:0a:e3:e1:de:d3:5a:b8:
53:8a:54:28:b8:38:21:75:98:0f:d4:9e:e0:a6:e8:63:5e:03:
5c:a8:0b:59:59:7f:f0:03:36:7d:14:8b:fe:7a:68:eb:8e:34:
33:02:a7:13:f3:53:f2:a6:e9:2c:87:59:e9:a7:82:7e:a3:05:
50:8b:94:2b:1e:a0:91:9c:fd:67:85:95:8c:f7:67:fb:35:c3:
ad:7a:bc:07:fe:92:a4:5b:2e:8f:7e:5e:a3:51:86:f1:a5:b5:
6a:ed:ee:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:18:52 2024 by rpki-client on console-fra.rpki-client.org