Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
File: ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer (raw, json)
Hash identifier: HBhWL8AYbaOSY8xcWkBdKyO3bg58DI6lkLmQYPkOoSY=
Subject key identifier: 10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBFE4F4DB9CBE5FEECCA3866CE7D3D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.115.140.0/22
IP: 2a06:7700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:fe:4f:4d:b9:cb:e5:fe:ec:ca:38:66:ce:7d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:f6:09:40:c4:1c:39:09:ba:93:7e:c6:29:
db:9d:e0:e7:2e:6f:f1:3f:61:59:35:9a:0d:61:8f:
ba:f6:07:de:3e:ec:1d:ac:51:c7:1f:76:d8:d5:ff:
03:b0:8c:68:72:33:51:e5:26:0d:aa:31:0d:f8:04:
72:bb:4f:d1:a8:2e:95:3b:23:7b:08:4a:d8:b4:10:
10:88:02:b8:10:1c:d4:5f:78:f8:0c:9f:8a:9c:04:
de:dc:31:ab:4f:65:7e:6b:c5:6a:ed:60:36:a6:83:
ea:cd:bc:54:d2:5e:25:b4:db:07:c2:c3:07:3c:95:
fb:99:eb:14:52:14:97:7e:58:12:5f:a5:98:89:1c:
ec:eb:22:8a:26:5a:bf:ac:65:c7:ec:7e:53:a7:d0:
87:b9:ea:64:3e:f3:a1:37:bb:ea:d0:3d:48:e0:8c:
e4:5e:9b:57:53:85:d0:f4:e3:0c:79:62:3d:aa:08:
3e:fc:fe:bf:a8:76:e2:f7:d8:27:f3:eb:7b:6a:43:
36:93:61:ba:f2:64:95:97:54:7c:66:48:4c:70:cb:
da:4e:be:e8:f6:72:67:c6:6e:9c:f7:76:3b:62:e7:
70:06:24:da:06:a7:d8:d5:46:0a:e8:b8:de:97:a0:
0a:e5:7b:7b:75:fb:25:f1:67:5a:d9:c9:81:25:a7:
2e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.140.0/22
IPv6:
2a06:7700::/29
Signature Algorithm: sha256WithRSAEncryption
2a:c8:3d:bc:0d:5a:16:30:07:14:68:27:67:33:ca:76:b6:65:
0b:23:d7:1b:b9:7b:bc:b3:4a:8f:1a:0f:30:b2:89:3f:27:38:
60:8c:f5:49:fa:72:8c:ba:41:5a:b8:f8:34:48:e2:71:c8:e9:
b4:3b:b3:b0:82:86:5b:70:d4:72:c6:bb:3d:73:92:61:a7:f5:
50:82:8a:f4:01:56:55:f1:7c:54:83:b8:a9:ea:47:66:27:08:
ff:15:1a:2f:fd:eb:90:32:09:5e:ee:f0:9b:97:4d:d0:84:af:
83:24:d9:65:6b:2f:37:d0:c8:3e:33:c9:a4:2d:8a:11:2c:8d:
a9:90:7a:4b:5c:b2:ec:19:eb:0a:d1:72:da:34:bc:f7:7c:7e:
44:a2:46:73:3b:95:10:a1:6d:92:41:55:cb:24:9f:68:b9:c6:
1d:03:48:2c:42:66:8a:85:f4:5b:28:21:6b:23:40:db:51:36:
85:25:27:83:e0:a5:ea:66:b8:fd:0f:ea:7b:1b:1a:00:11:fa:
b9:39:e5:bc:19:45:a8:92:83:70:a5:63:4a:5f:65:dc:93:a6:
d0:6b:c1:b5:77:59:43:19:35:d9:54:8e:ca:c4:3f:e0:45:c9:
27:0d:8f:47:48:ff:d6:69:26:e3:7d:3e:a4:82:d3:38:8c:e8:
e5:86:a8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:28:09 2024 by rpki-client on console-fra.rpki-client.org