Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
File: EImgJR4yvzxID1qUq7X7TrkGpbM.cer (raw, json)
Hash identifier: ovpEi0b5w39bSOMzd9oKTINLQ2beWlXq2fRuaq5ygAc=
Subject key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4932914B6EDD8F3CD84A648C06699A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.49.23.0/24
IP: 194.55.162.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:29:14:b6:ed:d8:f3:cd:84:a6:48:c0:66:99:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:d6:0a:9d:00:21:0d:1a:23:a1:90:6b:3c:
11:58:69:07:ba:5f:e1:80:c7:8a:a3:13:8c:4c:9a:
07:7e:6b:7a:e2:7b:b7:39:51:7c:8c:3c:22:1e:f4:
0e:ff:fc:8b:98:eb:4c:8d:b1:5c:b4:8f:81:fa:4d:
a1:a2:6e:fe:cc:42:b1:12:c1:80:57:82:e4:f2:56:
a9:ee:bc:d3:eb:1f:a4:14:30:ec:04:c2:63:32:cc:
55:66:3a:7c:9d:6f:aa:c1:ef:a3:03:41:b3:e1:0a:
8c:b9:2a:93:65:17:ef:46:7f:1f:0a:28:d8:b0:44:
c9:68:5d:3b:e6:08:7c:f6:6d:0a:89:66:f1:fa:0d:
4f:5c:ff:7c:f6:27:fa:87:d2:b1:39:81:ea:e4:5f:
ff:0b:07:5b:ff:c1:c8:8a:6d:a9:5a:ca:ae:01:33:
66:f3:9c:92:19:cb:20:0f:ed:a9:18:9b:7e:f3:09:
f4:83:64:81:28:87:c4:1a:6e:9a:6c:71:c2:20:f6:
34:27:b5:0b:19:41:e8:b2:fb:58:2a:fe:14:e5:c6:
25:f0:d3:11:15:32:33:e9:09:91:a5:52:9b:a9:59:
47:b6:56:cb:87:5f:f7:bc:3a:5b:04:d2:0e:75:25:
22:ed:a7:cd:23:20:7b:d6:e1:d9:cb:3e:9f:5f:7d:
97:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.23.0/24
194.55.162.0/24
Signature Algorithm: sha256WithRSAEncryption
87:dc:b2:14:f9:86:f2:bc:4d:99:86:8c:d4:68:18:72:3f:0f:
4a:16:d1:c4:db:79:6f:df:4d:cf:e0:5e:c1:d2:44:88:9c:2e:
2a:b6:bf:54:3b:a7:d3:1f:50:f6:d7:c8:48:2e:f8:53:af:63:
fd:75:35:15:1f:a4:27:25:0c:ee:75:00:f7:09:4f:e4:96:9b:
0a:e4:32:c7:f3:46:6a:6c:03:93:fd:27:22:93:eb:59:e7:d1:
21:30:d7:fa:ee:ae:cf:13:7f:e0:e0:02:b5:89:40:fe:3e:43:
f0:d8:c9:ed:bb:87:63:76:07:76:9b:40:5e:a4:f0:80:e4:d0:
97:64:41:1c:9a:de:d2:2c:ca:f0:14:14:f1:7a:2d:2b:27:c1:
10:fb:6e:3e:a0:db:0e:fb:02:d8:8a:21:d9:b9:59:04:fb:63:
ec:03:4e:6f:d2:b6:49:67:ac:08:e6:13:8c:97:c8:aa:a1:ef:
c2:a7:43:81:a1:d8:ec:d2:59:6a:e3:e0:6a:52:14:fe:95:c2:
3d:af:c0:9c:b4:5c:71:98:bd:06:8d:d1:ac:4e:d1:4d:47:c3:
13:a2:88:f3:98:d5:ff:5a:81:a3:d4:89:09:30:cd:e4:3f:09:
22:ce:78:bf:94:80:45:7e:d6:94:43:84:b2:ea:8c:db:da:b0:
79:86:da:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:54:02 2024 by rpki-client on console-ams.rpki-client.org