Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
File: E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer (raw, json)
Hash identifier: ix6UcV0zZRejBTzdNpRoeHvl+l4lopwdSejCOGTRmlk=
Subject key identifier: 13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34961DD2C1115D77AEA0C73B7092CFC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 130.251.0.0/16
IP: 192.148.193.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:61:dd:2c:11:15:d7:7a:ea:0c:73:b7:09:2c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:87:46:50:fd:a3:c3:ac:1b:24:c4:c5:b8:c9:
fc:34:f7:18:09:6b:a8:ad:6c:53:db:44:87:0b:73:
29:2c:e0:16:11:df:c4:8d:17:9f:d2:1a:9c:1d:b7:
c6:e7:e0:f8:a0:a4:77:41:15:4e:90:d3:c9:ed:53:
80:47:c6:09:72:cf:b7:0d:06:6b:95:f9:39:66:21:
51:6d:14:6f:78:fd:f1:99:29:2c:65:6b:c3:87:14:
76:c0:88:09:d0:b9:e8:9b:e4:e7:a1:99:b1:28:08:
2d:df:2c:8e:90:0a:f5:9d:aa:a1:a5:1e:62:0b:41:
0d:78:b7:79:e7:ff:ff:fe:e2:46:fb:fd:2e:9e:7f:
d9:37:37:05:c1:fe:bc:cc:3e:51:07:8e:65:55:3b:
43:24:3f:40:70:98:db:16:ac:56:c5:af:6b:b8:1b:
32:fa:27:6f:2d:ba:74:aa:25:0e:fb:53:08:63:44:
25:5b:94:47:79:5d:42:8d:8c:aa:5d:b4:cf:e1:83:
d2:b7:07:61:46:a0:e4:e3:ff:ea:5f:9a:13:15:ff:
b7:de:20:ee:52:01:2a:c0:1a:b7:9c:f7:21:23:7a:
96:e3:21:80:d6:8c:5c:2a:52:74:b4:8c:b7:58:fc:
7c:a1:6b:a8:58:cb:5f:06:29:9e:7b:ba:53:5a:b4:
5f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.251.0.0/16
192.148.193.0/24
Signature Algorithm: sha256WithRSAEncryption
94:34:87:39:d5:a1:11:55:fd:c7:5d:92:f9:6c:3d:15:c7:8a:
14:1b:73:30:05:0c:98:f2:af:06:1e:4c:26:6c:ee:5b:e8:71:
76:80:81:6d:f0:21:0f:f0:72:72:21:77:c9:90:2a:c5:c3:1e:
4d:e4:11:e3:20:55:39:ec:91:5e:e1:81:6b:a5:1e:97:db:3d:
eb:8c:30:80:92:d0:c8:45:11:01:c8:a3:ae:86:6a:29:f9:60:
4c:7a:39:17:7a:62:06:65:55:f5:76:76:e3:c7:8a:34:52:63:
6a:19:10:55:61:45:90:bb:0b:1c:33:47:3b:4e:35:df:72:8e:
de:58:30:f7:4f:ad:e0:75:d2:00:85:7c:1e:92:20:7e:be:5a:
29:9f:c3:e8:30:5c:1e:f5:b2:c6:30:b0:b5:38:6f:77:be:c4:
a3:e1:42:71:92:f2:48:29:32:8f:c0:b5:e5:5a:2c:c1:92:b7:
0a:06:fd:e8:03:1a:dd:1c:f6:72:cd:7f:f6:6e:46:c1:da:9c:
02:e8:6e:2a:f9:a3:b6:cf:14:6e:24:36:ae:ef:ba:1c:7c:77:
5a:75:f4:9b:82:9f:e8:db:28:bf:bc:39:8d:33:3c:3e:55:05:
e9:9d:8b:07:e5:b6:c6:33:25:74:65:01:21:85:b9:6e:c7:12:
e2:6d:27:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 23:12:16 2024 by rpki-client on console-fra.rpki-client.org