Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B_8jZE7nZfFzHb1VnmCL3ABTw0s.cer
File: B_8jZE7nZfFzHb1VnmCL3ABTw0s.cer (raw, json)
Hash identifier: FwxaebThhZbWEB4Fi8bnUqPDfWhYZaxAiuJWzALjwD4=
Subject key identifier: 07:FF:23:64:4E:E7:65:F1:73:1D:BD:55:9E:60:8B:DC:00:53:C3:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DA2D23B9CB54257A6ECF88A6FEA1F9707
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1e1c5-621b-458a-8e53-de37a01c6c39/1/B_8jZE7nZfFzHb1VnmCL3ABTw0s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1e1c5-621b-458a-8e53-de37a01c6c39/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 13 Feb 2024 14:15:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.132.1.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:d2:3b:9c:b5:42:57:a6:ec:f8:8a:6f:ea:1f:97:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 13 14:15:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07ff23644ee765f1731dbd559e608bdc0053c34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:9e:fe:6c:41:09:17:76:e1:74:5b:14:88:
29:54:f9:f0:3e:43:0b:e0:b4:fa:88:21:8f:8c:9e:
20:70:07:2e:98:f1:76:35:88:5a:00:2f:16:e7:74:
7d:10:a1:a1:26:96:d5:67:11:24:fb:7b:1f:8e:ce:
7e:ed:ea:6f:b9:9c:28:37:2f:df:6f:62:c5:d4:49:
00:b6:e7:56:ad:b8:7f:c5:11:28:63:b2:ee:b6:62:
bf:1b:83:98:ca:80:67:0f:7e:05:a4:cf:be:14:17:
f8:57:24:0b:42:40:c0:b0:90:6f:32:99:8a:3a:4d:
c2:fb:1a:d7:63:01:8d:ce:12:cc:23:6b:c8:21:b3:
a1:75:81:f0:06:ab:f8:61:fd:82:a9:ab:f1:aa:77:
6c:36:87:8e:e3:c1:46:a9:09:7f:f4:23:5d:a6:6c:
90:52:3e:b9:76:58:20:34:ab:ce:37:15:4f:90:fc:
97:1b:ad:4b:05:61:13:89:c2:15:d6:e9:14:96:2d:
4b:34:72:fc:c7:82:9f:46:7b:46:30:43:c4:40:3b:
76:67:35:c7:ba:e0:cc:d0:2b:63:ed:fe:e1:6a:90:
6e:0e:5c:7a:94:a7:17:36:3e:27:63:31:72:ad:c3:
2d:19:5d:df:03:3b:11:5c:a1:bb:d2:3e:84:a7:d0:
82:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FF:23:64:4E:E7:65:F1:73:1D:BD:55:9E:60:8B:DC:00:53:C3:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1e1c5-621b-458a-8e53-de37a01c6c39/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1e1c5-621b-458a-8e53-de37a01c6c39/1/B_8jZE7nZfFzHb1VnmCL3ABTw0s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.1.0/24
Signature Algorithm: sha256WithRSAEncryption
99:09:37:9f:67:a4:57:4f:71:66:ee:4a:62:d3:5c:a7:4f:0c:
21:61:cd:f8:2f:55:7c:c0:88:e2:dc:1f:5c:f0:73:0e:4e:e5:
cd:fb:bc:11:1b:25:06:31:3a:90:7b:c1:4d:e5:25:c1:d9:4a:
34:93:96:4a:b2:05:62:34:22:3e:85:ed:53:3c:82:ec:d1:86:
25:77:2f:e4:90:a4:b9:6d:52:81:29:df:59:d6:d0:27:5d:7c:
8c:9a:00:2f:e6:95:f9:46:6e:3e:06:65:0b:7a:18:76:3a:81:
cc:8d:93:19:e4:7e:26:b3:60:08:36:59:34:a8:de:e7:6b:7a:
64:4b:e1:11:c1:f5:e8:80:9d:b0:46:21:6e:10:00:a0:f0:da:
00:e5:8d:8c:62:ec:10:a0:2d:2f:82:a2:e8:6b:de:b2:46:4b:
50:8f:38:7f:68:04:95:6a:50:13:09:a9:ed:2d:ce:53:45:d2:
72:58:a3:e2:94:2c:7a:9f:f1:da:a5:f1:b0:45:58:6d:ea:05:
1a:1a:89:b4:4f:d9:d0:0d:6a:70:bc:a3:95:c2:3b:ca:43:97:
d2:2c:0d:ac:82:10:cf:a9:6d:6e:5a:8c:1a:9f:0a:80:5b:ed:
88:69:5b:b0:57:8e:f3:1f:d0:4a:88:ff:2b:1a:5a:b5:19:1b:
b6:46:20:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:18:47 2024 by rpki-client on console-fra.rpki-client.org