Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
File: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer (raw, json)
Hash identifier: GJXvkivihqs9MOR7pQQXwDq84HUACdFqtCYnOHMrqCY=
Subject key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4245C6ACCC1921F84493877E282AEBB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 216.245.80.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:5c:6a:cc:c1:92:1f:84:49:38:77:e2:82:ae:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4d:92:74:d1:0f:01:f4:30:e9:bf:9f:18:79:
f8:84:76:e2:ae:2b:b9:48:e3:a6:f5:d4:3b:34:77:
ef:0a:c1:a1:ec:f1:b4:5a:49:fe:fa:c1:35:e5:b1:
ed:3e:68:6f:a4:30:c6:62:7c:e5:fb:5a:87:d9:a7:
65:11:b3:a9:d0:be:3a:7a:d3:2c:79:e3:0b:c6:3f:
86:9a:9d:36:e4:fc:af:e3:02:59:32:41:56:3c:a3:
83:3c:71:37:9b:bb:78:1f:a7:8d:d5:88:56:37:c9:
54:94:29:71:d8:37:9b:dd:68:da:9c:11:1b:6b:8c:
39:10:63:46:d5:90:bc:58:ff:92:7d:0c:0e:22:e5:
90:18:e5:a5:5e:48:1b:29:79:c6:ba:b5:16:31:ba:
28:28:2d:d9:44:2d:ab:7a:4f:56:a3:d1:04:57:dc:
5a:d7:96:94:68:5e:d8:18:ed:75:58:ff:8c:35:20:
10:01:64:fe:a5:28:0d:e9:72:37:f4:11:38:67:8e:
ae:dd:28:59:b0:97:9a:98:bf:f5:74:d6:ad:c7:16:
a3:3b:0a:05:4d:c7:5e:83:85:99:2d:0b:3b:b5:6c:
6b:f2:6d:d5:f2:b1:08:a7:4e:d2:8c:82:be:c7:f1:
e5:05:08:9e:64:4c:81:50:a8:ba:92:25:43:8a:87:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.245.80.0/24
Signature Algorithm: sha256WithRSAEncryption
40:8e:90:0d:d3:a0:38:3e:57:6f:66:54:a4:02:48:8d:9c:e6:
01:57:82:0e:b6:e6:0d:3f:16:11:7e:a7:bc:a6:99:32:fa:70:
55:f6:c0:08:c8:c3:18:5d:64:c1:0f:dc:ad:9b:71:26:00:48:
41:dd:9a:dd:9c:c9:cb:4c:86:98:84:c8:c7:c6:42:36:10:ab:
9c:05:4e:a7:e4:fe:da:ed:8e:72:a1:06:dc:10:8d:a0:37:52:
37:4c:7f:1d:d6:c4:dc:75:f1:2f:cc:d8:e2:8a:6f:10:56:76:
82:28:8e:2e:bd:58:09:fe:3c:2c:f1:fc:92:11:f6:1b:08:9c:
4a:c4:16:d4:8f:ee:c6:b8:52:80:c2:2e:54:0d:95:bc:0b:8a:
79:76:8b:32:4c:13:38:65:96:d0:95:f9:d1:ed:5c:d8:af:0a:
eb:81:1b:2e:ba:ff:79:20:75:20:9d:a3:d4:c6:8e:34:4e:9c:
5b:4e:e7:47:c1:69:f9:88:c9:d1:d8:97:53:e4:5a:ef:b6:ea:
a9:f1:ed:fe:08:ca:48:e3:d2:87:02:c1:06:89:cc:1f:f9:0a:
70:81:33:92:ac:ee:69:62:0d:64:10:f5:9e:e7:5e:e9:c9:14:
63:f9:31:cc:33:60:69:69:ec:a9:95:52:98:54:63:1d:5a:22:
06:24:1b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:03:53 2024 by rpki-client on console-fra.rpki-client.org