Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
File: CaT39OTp5yw6M5P7XW6nQrwbTCg.cer (raw, json)
Hash identifier: Lh2VGcoRhBhsaKBIQMVvuXB9iDDyhZEPq/mgiz/P+Ow=
Subject key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCF495AC7BB4641F50858201D3D0F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:34:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 87.236.164.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f4:95:ac:7b:b4:64:1f:50:85:82:01:d3:d0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:34:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:3c:09:94:ed:48:d2:e2:79:53:56:74:f2:
55:91:92:8b:40:bc:93:14:f7:a6:a1:c8:2a:87:dd:
30:72:8c:f6:1a:45:49:53:da:bf:98:2d:0e:d3:29:
40:bd:dc:f7:93:14:e3:66:6a:ee:32:aa:9e:6b:d8:
e1:64:a1:bc:95:d7:a7:52:e6:07:f0:c5:d2:6f:bc:
d4:06:6e:e5:55:38:d2:09:0b:84:ba:8e:8a:16:dd:
57:9a:ab:cd:26:5e:ed:3f:72:b8:94:e7:b6:2a:37:
f0:c6:70:b7:1d:31:c8:16:16:75:75:8c:c9:2b:7a:
85:bb:46:db:ea:50:d6:e7:68:f5:2f:8a:64:ef:ab:
1a:b5:97:2d:ed:7d:89:ff:22:96:94:79:0d:32:10:
6d:00:80:5f:dc:f0:89:2e:42:90:b0:74:62:63:50:
4a:b9:78:85:72:ae:78:b2:bd:4a:02:ae:44:d5:ac:
83:4d:70:1f:dd:db:25:91:c1:cb:b8:a0:bd:e0:69:
f9:3f:43:d0:bf:54:f2:03:cc:8f:7d:63:51:87:27:
84:29:02:2e:cd:5f:19:b0:ad:8b:d9:23:03:69:79:
69:94:34:4b:73:50:82:2b:cb:a1:03:85:30:5d:3e:
41:4f:d4:08:dc:62:26:61:2b:40:30:51:1f:28:b8:
1f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.164.0/24
Signature Algorithm: sha256WithRSAEncryption
47:dc:08:69:7f:40:fd:61:85:13:eb:6b:cc:cf:c5:68:10:cf:
98:73:24:f8:f8:72:4f:36:ab:d3:fe:27:d6:b6:2e:22:5b:6e:
7e:14:a2:e9:03:a2:df:9a:37:fe:10:32:d4:a9:35:b7:55:fb:
1b:2a:aa:b9:5f:d3:6e:2a:d8:36:f0:96:53:21:87:76:ad:1f:
99:db:16:65:f3:b0:58:c7:0a:04:0d:c6:04:d0:97:86:52:ae:
2a:89:39:5e:8b:0d:53:1c:71:a6:07:68:c4:cd:79:a7:8d:7d:
30:e2:2b:57:f2:4c:71:88:19:ce:23:01:3b:6b:29:b8:89:20:
fd:05:db:0d:4e:86:38:0a:2b:8d:f3:77:28:c5:ff:82:7a:e0:
a8:d8:c7:0b:fb:ff:f9:5f:fa:ec:f6:e8:c3:6d:0d:51:75:ae:
e5:d9:f1:88:c5:84:73:4b:ea:59:7e:75:c3:bb:66:82:35:05:
aa:e5:d0:eb:03:1a:32:6f:9c:68:55:3c:c4:84:b4:43:cd:0c:
ec:64:58:06:88:16:08:39:9f:00:7a:72:7a:dd:ce:f9:96:a1:
4c:b6:79:35:59:3e:70:db:6b:65:91:9e:06:3e:0b:7f:91:6c:
9a:86:d2:26:7c:82:04:d7:1c:11:89:98:6c:3b:16:eb:10:92:
fb:dd:34:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:05:16 2024 by rpki-client on console-fra.rpki-client.org