Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer (raw, json)
Hash identifier: /ee5/bSL3psHDtNSN7E9FiYAYrNNondW8KpZqOpqBUk=
Subject key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4249E894F79AECA0AEFA0F0F20B0153
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.245.228.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:9e:89:4f:79:ae:ca:0a:ef:a0:f0:f2:0b:01:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:f1:0b:09:6c:4d:3c:ec:2f:18:15:d2:be:
fa:76:2c:42:d0:e2:ce:c8:a3:63:05:0a:e2:d8:69:
9a:2d:9f:93:29:ae:55:82:b0:77:1b:69:89:cf:9a:
b8:1b:96:71:28:c2:cb:ca:b3:b6:56:69:ea:a2:f8:
9b:b3:c1:45:d8:4e:0a:b4:cb:23:58:82:c0:ba:52:
fe:25:25:73:89:28:7f:2d:6f:d5:8f:10:bd:6f:18:
59:3a:73:35:c3:c9:16:b4:82:68:55:5a:21:1b:9a:
d8:6f:6c:01:b9:02:1a:26:bb:5e:c6:94:5d:c9:9c:
86:dd:4e:71:82:72:e3:af:63:90:ff:06:aa:ac:20:
4b:0b:82:72:14:71:f0:d4:d1:b4:59:c9:da:b6:9d:
e3:cc:cd:e1:db:76:bd:32:40:6d:d4:e6:8f:8e:93:
a9:af:18:62:63:66:f6:f7:b4:08:b0:5b:ec:0f:80:
32:fe:65:c2:87:54:6d:23:ed:99:1e:6b:14:d9:b4:
fc:46:b5:d3:90:3e:04:66:48:7a:18:3b:d8:57:ca:
07:87:d1:34:27:8f:86:ea:76:41:f6:e2:fa:ce:bb:
7e:9b:30:c1:2e:12:8f:a0:a2:d9:a9:72:67:ca:27:
9e:cc:e6:9f:32:d8:e4:7a:ca:d3:af:45:c7:13:1b:
64:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.228.0/22
Signature Algorithm: sha256WithRSAEncryption
94:45:51:4e:8a:f2:ad:e6:f8:ec:7b:ee:ba:07:34:3e:28:35:
e4:4e:3a:fb:38:7d:fa:fb:86:24:e6:ab:88:08:c9:56:20:5e:
fc:cc:be:dc:47:b2:59:eb:b5:ef:70:97:c2:e8:5b:8b:f0:18:
de:12:a4:e0:5d:d6:1d:55:36:64:41:54:69:47:11:04:f5:4a:
1b:19:7e:19:78:da:8b:fa:c4:d9:39:d0:34:f4:1b:85:03:6c:
8e:5f:46:2e:24:12:3c:f2:c4:ef:31:62:b7:7d:4d:55:13:06:
10:77:a3:f8:de:bc:bc:d1:3b:0c:c7:27:19:44:80:eb:79:a3:
55:48:5a:ec:05:21:43:cc:47:0a:ab:d9:ec:fa:1c:e7:f7:67:
b6:49:f5:ad:75:d5:9a:1b:d5:07:34:69:27:5d:26:59:ca:47:
b9:51:6d:d6:66:22:cd:bd:f8:d3:90:f9:20:18:cc:43:cc:50:
01:5a:31:65:2a:a3:10:d5:a0:19:82:a5:cc:81:0b:bf:49:18:
ec:27:d6:7e:c1:c0:24:da:6e:f5:d7:e3:14:62:8b:69:b9:57:
c6:a4:d0:aa:fe:c5:60:01:8a:ae:66:20:5c:46:c4:55:87:69:
e4:af:7c:5e:88:b6:bd:2c:b8:ba:c9:31:ab:20:18:a1:82:f8:
c8:b3:5a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:02:48 2024 by rpki-client on console-fra.rpki-client.org