Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
File: D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer (raw, json)
Hash identifier: ZtHS5DHJE7uwuu0wqB+nkc1X+OaE+EiCn4E9Z9UUjHY=
Subject key identifier: 0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DE4E8B4934D24DEC9865C551BE6BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 37.9.176.0/21
IP: 185.20.212.0/22
IP: 2a00:4b60::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e4:e8:b4:93:4d:24:de:c9:86:5c:55:1b:e6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:4f:44:a2:8b:f1:1a:9c:a7:f9:28:5f:02:
2a:ab:28:42:71:2f:ef:e2:3c:2b:a8:d7:3e:5f:2c:
50:19:a6:b1:0c:94:51:82:2f:5a:58:f6:ce:97:2e:
84:84:86:44:00:57:8e:96:d1:a5:89:a4:c0:51:b2:
dc:5c:56:f4:78:57:fb:e6:4e:5a:0c:bd:28:9e:cf:
d4:23:b0:87:32:62:f6:7e:fb:51:b3:6c:50:31:59:
ac:b2:e2:63:49:57:6c:9c:8f:24:67:f4:5c:2d:49:
1d:1b:7c:c9:61:0a:5f:48:01:bf:23:64:c1:99:0a:
a4:a0:31:e2:8e:f5:16:35:03:61:17:ac:a3:31:d8:
11:58:51:ee:3a:4a:a6:19:b5:57:8d:5d:9e:0e:b2:
0d:a9:30:26:3e:ef:37:84:67:06:80:16:7c:cd:03:
88:61:a2:fa:11:14:6b:75:e5:d4:e7:90:50:ce:96:
44:df:42:34:ab:40:07:ab:ff:63:cd:14:61:9c:fa:
1a:dd:d5:6c:14:0e:1f:2b:93:4a:f6:68:7b:85:37:
fb:e6:e7:f1:74:ec:5b:04:b5:64:82:fe:47:1d:db:
11:3d:8e:0c:b0:f2:2e:fa:63:18:99:4c:1b:12:05:
7d:91:e8:a2:1d:78:3e:f9:00:7d:fa:28:0e:c6:39:
b8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.176.0/21
185.20.212.0/22
IPv6:
2a00:4b60::/32
Signature Algorithm: sha256WithRSAEncryption
5f:b1:29:15:dc:72:1e:d5:61:5f:58:19:c6:37:5d:c2:c7:ce:
c5:c5:1c:02:d8:06:38:9b:f3:69:93:cf:e3:72:92:b3:28:08:
58:3f:a1:88:fd:2e:bd:4b:97:83:ac:16:8d:53:9b:e4:75:5d:
60:6c:b2:75:c7:c2:22:66:66:f2:fc:65:8a:f3:c6:c6:e0:35:
69:84:1d:ea:87:07:92:dd:39:fd:b9:4f:d3:fa:18:b3:de:e4:
fe:ce:7a:71:46:4c:d4:4e:0c:77:d3:21:f7:9e:cc:56:02:94:
65:42:84:82:c3:6d:d6:c8:d8:04:ed:ec:dc:68:e0:1c:63:7a:
6e:06:f1:12:00:e0:09:0d:9e:2f:cc:01:2e:4f:61:b4:a2:57:
93:99:b3:44:34:db:28:d7:f5:eb:ed:c0:76:46:d5:54:ef:6b:
cf:81:97:93:74:81:68:7b:37:be:ea:79:9c:da:c7:b8:9a:74:
a7:11:85:f1:70:d7:77:30:b0:dc:46:58:fd:cd:e1:07:28:6c:
b0:21:11:67:7d:02:47:72:88:7f:4a:e6:f4:8b:f8:02:4d:41:
cb:e8:0b:72:6d:ea:04:76:c6:81:f3:7c:e2:86:8d:ed:04:97:
75:50:f6:48:65:5b:e3:00:95:e2:9d:6a:7d:05:23:fc:b8:00:
1e:a0:2f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:29:56 2024 by rpki-client on console-ams.rpki-client.org