Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
File: D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer (raw, json)
Hash identifier: SQA/ubEVdIq02xP8Ee4ZFY82S74mBIitRK/LcEe7u+0=
Subject key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F7628A1EC0C4DA0E0447D5016DC4E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.133.188.0/22
IP: 2a0e:77c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:76:28:a1:ec:0c:4d:a0:e0:44:7d:50:16:dc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:b2:66:61:ad:6e:e1:09:0c:4e:26:29:5b:
67:89:d2:01:e2:c7:84:56:ee:40:af:ce:56:87:e7:
e7:57:ae:7b:7e:ab:a1:91:0c:b5:73:c3:99:85:22:
de:93:87:9b:a2:0d:1b:11:a7:90:c3:6e:e8:2e:c9:
8c:9c:cd:a0:21:46:22:f0:89:d7:c8:67:95:d5:1e:
dd:a2:0c:36:ea:c8:b6:5a:1b:16:32:4f:e2:2f:4b:
27:60:4b:06:11:5e:b3:86:78:c0:6d:c8:12:e8:47:
ce:f3:35:2b:ce:9c:89:1d:82:c5:3e:39:81:86:65:
1a:97:da:74:80:87:d7:f4:36:1a:a5:80:8d:fd:3e:
9b:c6:33:b8:0e:fc:ba:1a:d2:f7:42:72:b9:7f:98:
74:d3:37:0d:6f:21:c3:2b:74:8f:fa:b0:cd:76:02:
e6:fd:66:1d:a6:5a:5c:46:70:fd:63:7a:45:29:25:
49:70:af:33:77:f8:9a:5e:ac:3f:58:7a:18:37:e9:
65:fb:43:5c:fe:6b:2d:29:6b:2b:a0:1e:43:19:4d:
5e:ab:b6:15:47:86:0b:9b:9e:ba:93:82:25:b2:6b:
79:ec:e4:60:d2:01:11:74:93:ab:16:8d:f1:18:db:
fd:1f:05:c7:d1:c3:1e:e7:20:5d:1b:5b:d8:f1:83:
35:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.188.0/22
IPv6:
2a0e:77c0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:15:56:03:de:65:66:b4:7f:0b:1e:09:cf:9e:4f:db:65:b1:
bd:f5:b5:d0:82:e5:81:8f:01:97:fc:14:21:9c:41:3b:97:f6:
b1:74:b2:fe:60:fc:b2:76:d4:f3:7a:43:c6:cb:73:7b:2f:c5:
4e:24:9c:5c:9a:ff:99:98:42:10:e0:e7:17:f4:41:f5:4c:b0:
b6:09:a1:95:71:56:4b:71:32:2f:1e:b9:a9:4b:d9:4e:50:6b:
2e:c8:87:6a:80:b6:19:e7:31:58:c0:3b:b6:15:91:db:80:83:
83:77:bc:49:81:9c:11:8e:33:9a:90:93:07:77:4a:12:23:e9:
8d:1f:88:2f:b5:b5:7c:59:af:73:14:c1:c8:15:82:83:59:8e:
fa:06:6d:15:ba:3d:c2:9e:b9:ae:de:ea:91:c3:1e:bc:dc:bb:
41:6a:dc:65:f8:5b:68:a6:1e:4c:95:1a:f5:8f:06:d4:f0:a6:
89:67:17:8a:20:62:91:02:ef:69:50:0a:16:1c:76:35:a3:4a:
20:c0:e1:b0:8d:20:ac:54:5e:73:00:69:ef:5c:9a:c7:4b:dd:
e8:00:dd:72:e3:c4:53:8b:3c:45:2c:84:09:69:72:a2:a3:74:
20:f7:d6:99:f3:08:64:28:83:92:83:c2:de:be:47:ca:f4:18:
b4:ac:78:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 23:16:08 2024 by rpki-client on console-ams.rpki-client.org