Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
File: F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer (raw, json)
Hash identifier: b79b9AtOatYwSljJfoToqEpu1Klj6ZjPkmOn6QUPj8A=
Subject key identifier: 17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50141D34A48B7C9484FE7D10D3A3F5A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.6.225.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:41:d3:4a:48:b7:c9:48:4f:e7:d1:0d:3a:3f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:60:dd:7f:61:44:db:6f:cc:64:39:b1:6e:
b9:8e:a2:30:3b:92:45:cf:7d:40:a3:b9:ac:51:97:
80:ae:d2:e9:34:45:6c:cd:23:d8:73:49:2c:a1:a6:
c5:32:a8:27:8b:65:03:c5:81:9a:ff:4c:a0:5d:ec:
b9:ea:d3:61:31:2e:4b:dd:6d:a9:b2:de:1d:07:ee:
b6:1f:34:19:c0:6b:4a:c5:6b:28:3b:09:cf:51:e9:
04:70:7e:2e:bb:8d:ed:c7:3e:89:42:a6:4c:f4:98:
ce:a9:b0:77:d0:fc:f1:a5:36:21:fc:40:12:54:33:
cd:34:a0:e9:ad:53:5c:6c:ef:19:a4:da:99:91:b7:
44:f6:3d:4e:78:2d:9a:39:37:6d:1c:16:ab:25:7c:
dc:27:10:03:71:1e:23:82:31:67:f0:a5:d6:d8:a8:
31:1f:c3:68:19:ad:dc:3f:f0:c5:e5:20:48:4f:38:
7e:fb:d0:70:34:e3:5c:a3:50:33:65:4a:b6:ad:5a:
d6:b7:83:ac:1b:0b:a0:c2:cb:f7:f4:11:69:e5:89:
1a:1c:c7:29:55:70:e7:7b:cd:e2:ba:3e:7f:c4:7f:
9b:d5:50:6a:a7:dc:8d:96:15:62:ee:78:65:e0:b7:
ee:47:2f:8a:82:e6:a8:67:43:f9:bb:20:c1:35:0c:
33:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.225.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:db:69:72:28:80:05:20:62:23:5d:02:ca:94:6a:26:e3:7d:
98:5f:f4:e7:1c:86:e2:e9:8d:07:04:dc:58:34:9b:32:a6:95:
c0:e9:38:9b:73:f7:91:bb:75:bc:d7:35:14:78:c2:41:98:c0:
a7:32:84:a1:b3:a8:af:9a:06:6e:35:95:b9:92:d8:69:c7:30:
bf:0b:19:2f:0f:9c:39:17:12:2a:28:b7:8f:37:f6:4b:b5:01:
0b:5b:f2:94:03:90:b0:51:13:43:34:fd:07:f3:67:08:04:7f:
2b:d0:f8:25:6a:e0:ab:9c:bc:2b:43:7d:a8:13:44:13:60:d9:
b4:be:2d:67:99:24:25:ab:c2:f3:a0:93:20:c3:2a:1c:f5:8f:
29:81:a6:e5:4c:88:e5:4d:76:03:71:42:70:a8:7a:8f:c2:b5:
c9:d0:61:f5:c6:16:6f:4b:e5:50:92:0a:ce:f4:eb:9e:76:70:
9f:e5:66:e3:f8:2c:34:c3:bc:ae:e6:88:57:ba:3c:27:f8:da:
66:89:e7:f9:61:9f:01:14:1a:1b:bd:3a:77:e3:d5:b7:5f:43:
2d:b5:32:69:ec:dd:c0:99:4f:57:93:27:78:e1:f5:81:d8:4b:
18:cf:93:5f:98:41:9f:10:d1:95:49:6c:f1:72:80:d5:33:7c:
12:ab:2d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:56:48 2024 by rpki-client on console-ams.rpki-client.org