Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DZ2y88Ct6rN2fAsxchhFqz1EXRw.cer
File: DZ2y88Ct6rN2fAsxchhFqz1EXRw.cer (raw, json)
Hash identifier: Y1zbOnSE1Nyw+hsy1ik17/qNgrMg6fTFQ/f8RZe+wq4=
Subject key identifier: 0D:9D:B2:F3:C0:AD:EA:B3:76:7C:0B:31:72:18:45:AB:3D:44:5D:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D5EC2F700D7DA4E202B9E7657B1FE4FB5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 31 Jan 2024 09:04:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.8.46.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:c2:f7:00:d7:da:4e:20:2b:9e:76:57:b1:fe:4f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 31 09:04:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d9db2f3c0adeab3767c0b31721845ab3d445d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:56:37:38:50:fe:f4:03:e7:d9:3c:67:fc:
66:fd:b9:07:6e:ef:20:34:fd:66:2a:81:01:45:ee:
91:71:a9:a5:b3:02:68:49:34:39:47:57:26:6f:45:
08:91:3f:77:89:63:89:21:44:b1:a2:9a:29:e8:e0:
ab:83:fd:39:13:2d:d4:ac:72:c1:42:7f:dd:49:ad:
60:00:11:58:df:a8:78:83:69:26:08:17:87:0d:86:
08:2c:d6:a3:96:7f:47:38:5c:b8:6a:0f:d9:91:10:
76:9e:8b:34:2c:75:94:6e:05:a6:6c:5d:ee:a4:61:
11:04:e9:de:4e:50:51:86:3d:b8:43:e2:f2:07:0c:
40:de:84:c4:5f:f7:0f:bf:9d:05:3c:22:92:fa:7c:
26:7e:aa:4c:0d:fd:f0:a2:e3:0b:cc:ed:8a:9d:71:
64:b9:8a:20:d8:5f:75:74:11:21:1b:4d:da:0f:fd:
9a:77:aa:e7:12:38:c6:45:e8:46:f2:33:25:d9:71:
47:45:f5:80:3e:36:e2:00:38:5e:78:9b:b7:2f:38:
85:5a:fe:d5:d5:4d:e0:74:c7:de:fd:b5:1b:14:ef:
8c:75:60:39:b1:d5:98:1e:61:c9:9f:f9:3d:63:69:
6c:42:e5:45:c6:7d:f9:91:9d:de:78:06:49:51:dd:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9D:B2:F3:C0:AD:EA:B3:76:7C:0B:31:72:18:45:AB:3D:44:5D:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.46.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:e4:44:ce:ee:35:af:a3:cc:4e:fe:37:76:22:e1:ea:ed:0c:
30:e8:4d:35:d2:37:a5:c9:e8:79:e8:33:2a:d5:7b:21:15:03:
bc:be:b9:85:76:5b:2d:12:25:75:c5:b9:8d:df:38:9b:3b:c2:
d3:ea:42:79:23:c5:d0:21:e5:ea:b1:13:d0:df:f9:a9:c0:7b:
8f:6c:44:0c:72:de:98:89:4f:2e:86:0f:92:44:a9:b9:ca:5c:
df:29:6b:60:d4:f0:64:01:58:48:3a:c3:c3:23:95:f7:ba:94:
65:12:0f:95:05:96:2a:5d:ec:55:81:af:8d:2c:0b:cb:e8:dc:
98:51:0b:a9:37:6d:e7:59:64:45:63:9c:bd:37:fc:c0:15:31:
43:74:a9:cd:88:cc:92:f5:86:8c:5f:c5:c5:73:31:1f:b1:59:
b9:b6:dd:b8:02:b9:ac:9b:f7:e2:8c:b2:4a:fb:2b:f5:93:54:
d7:aa:a6:f6:cc:e5:27:83:3a:49:49:d3:0a:e6:06:93:42:18:
da:d7:e1:61:28:3f:78:01:d6:55:94:3a:c8:1e:f7:16:68:40:
fb:86:4c:ff:ae:ec:0a:77:ba:b3:65:0a:ac:80:a0:e1:21:cb:
4d:ec:ab:44:8f:a5:65:0b:50:db:4b:78:65:bb:24:66:92:97:
a7:af:5b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:22:09 2024 by rpki-client on console-fra.rpki-client.org