Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FEBdIJrsw4SSmgrZZLTbzVwEaMI.cer
File: FEBdIJrsw4SSmgrZZLTbzVwEaMI.cer (raw, json)
Hash identifier: txzKgfLdaekxBvF/UGwO6edf3sL+JfCtdROBtVJ8BPE=
Subject key identifier: 14:40:5D:20:9A:EC:C3:84:92:9A:0A:D9:64:B4:DB:CD:5C:04:68:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D806A78FC5402D3A05D35AC92FC26
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/FEBdIJrsw4SSmgrZZLTbzVwEaMI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:30:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 62.106.77.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 08:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:80:6a:78:fc:54:02:d3:a0:5d:35:ac:92:fc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14405d209aecc384929a0ad964b4dbcd5c0468c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:10:fb:10:87:65:92:d8:75:a0:1a:09:8a:
27:31:0b:84:8e:e2:11:d4:04:12:4f:8a:e2:ba:78:
bd:83:8a:82:bc:1c:be:c9:50:b4:53:8b:53:8a:8f:
4b:c0:50:67:e7:2d:e8:4b:d0:19:3a:5b:d6:0c:43:
8b:00:a1:75:cd:1f:41:ac:bd:05:cc:9b:6d:9b:0a:
5a:65:70:33:e3:8f:b2:f6:19:50:fb:7d:83:1f:6d:
cb:d5:78:64:f5:16:51:dc:46:b2:11:10:fe:be:e4:
be:71:88:e2:ea:06:45:96:7f:38:51:b3:43:9e:64:
c4:cf:f4:f7:1c:36:fa:9e:ee:e9:cc:ef:45:26:d6:
e5:c6:2f:67:9b:c6:6d:d7:ac:ac:23:f0:2f:55:67:
0f:67:94:21:ad:ac:76:82:42:ce:0e:e1:e7:b0:61:
6c:a6:a6:da:58:68:34:0f:95:7b:0c:c8:ba:b0:a8:
4b:26:23:63:e4:da:12:57:7f:47:b0:86:57:dd:23:
0a:97:db:af:b5:04:d4:d2:1b:d7:76:1e:51:21:f6:
16:db:db:2e:b1:fc:92:bf:46:71:1b:50:2b:62:f9:
36:8f:dc:b9:af:1b:6b:b2:bb:3f:b8:bb:b2:b3:76:
51:1c:59:b1:27:49:e0:e9:f0:19:2a:12:c3:10:eb:
ae:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:40:5D:20:9A:EC:C3:84:92:9A:0A:D9:64:B4:DB:CD:5C:04:68:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/FEBdIJrsw4SSmgrZZLTbzVwEaMI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.77.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:e9:bc:a6:11:fe:ae:eb:1f:08:10:1e:f8:51:ba:7f:1c:43:
b2:0f:54:b4:f6:be:95:6f:a6:01:d0:87:b5:ca:de:6f:96:b4:
7f:54:b9:79:45:e4:d7:4d:86:8c:89:93:1e:7e:fa:58:7f:4c:
e0:b5:36:7f:1b:7a:91:71:3a:ef:10:cf:cf:a7:d5:3b:45:d9:
a9:a1:e6:cf:54:af:76:f0:b0:5a:c2:bd:e1:5d:f1:fb:ea:84:
e5:17:d2:c2:13:92:61:a9:08:3e:e4:1a:b4:c4:72:76:29:19:
e3:c5:09:9f:1c:42:eb:71:19:4a:4b:61:b5:f2:28:52:7d:8e:
2d:23:ff:6e:69:fe:9d:f0:67:67:e7:3e:97:82:30:75:a9:73:
a0:21:da:fa:eb:15:11:28:26:f8:45:fa:48:61:a2:da:a8:3b:
54:ca:39:ea:8b:4f:9d:47:a8:83:3d:13:18:7a:0f:21:ae:20:
3f:e3:09:6e:7b:2c:f5:91:ed:5b:71:98:ac:aa:ee:f0:99:0a:
aa:fa:0f:6d:a7:6a:c6:c1:19:77:ae:77:f7:ce:a9:bb:ff:ef:
9b:4b:6c:1e:5d:5c:22:69:a1:97:d1:03:b3:0d:ce:d0:23:32:
de:af:c5:3e:5c:6a:dc:43:e1:6d:dc:f2:d9:8a:bf:e3:15:a8:
94:d8:22:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 11:54:23 2024 by rpki-client on console-ams.rpki-client.org