Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
File: FlAwKhah7Cm1aambSuEFc8YmNto.cer (raw, json)
Hash identifier: t5XjB0DpZC3ysBE2JSKJ2q03X4VHiguoDgBQZawy5OM=
Subject key identifier: 16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2B01D8CEC96226AC36F4B6CD9F8129
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:34:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.130.232.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:01:d8:ce:c9:62:26:ac:36:f4:b6:cd:9f:81:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:34:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1650302a16a1ec29b569a99b4ae10573c62636da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:83:bf:4a:39:e8:45:a1:af:0e:69:31:29:f5:
44:0f:0f:7b:92:e4:be:a7:e1:1a:c1:1e:4b:a9:83:
67:01:67:70:4b:3b:f4:a0:32:e2:d0:c3:83:77:57:
17:86:ce:10:e4:1f:bc:cc:0f:f6:84:c0:48:5f:a9:
2e:d8:f7:17:7e:7a:2c:05:b6:34:1b:b9:0f:32:06:
bf:bc:ce:50:45:43:51:ff:21:27:d0:bc:88:14:65:
6f:fe:5b:c5:be:f9:8f:7c:f5:f1:93:69:92:70:b0:
e6:83:d8:c2:b6:d6:0c:0a:72:fc:f0:2c:50:95:9e:
00:d2:c9:37:3e:aa:ec:d8:5c:77:b6:83:ec:ad:0a:
a7:70:97:9b:d7:81:1f:83:ba:60:6a:b1:d0:0b:2b:
fb:80:ef:86:f8:7a:94:e8:80:70:df:04:ba:86:7e:
2c:1b:b2:63:48:cd:16:d6:f5:5c:9c:b3:a2:e4:8e:
43:ac:47:3c:71:3a:d9:47:89:9d:5c:85:e8:5f:5b:
ab:6e:6b:25:c8:9b:0c:50:0e:df:42:28:f8:c2:3a:
89:6d:21:80:09:96:b2:c2:cf:35:67:4f:5b:54:a3:
30:e5:4b:62:07:81:6a:bf:9b:75:a1:40:f0:51:b6:
93:0c:6c:12:fc:0a:31:a2:65:4c:d6:79:07:d2:ca:
2d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.232.0/22
Signature Algorithm: sha256WithRSAEncryption
12:19:4d:97:27:80:dd:45:b7:d5:2b:8a:02:30:d8:bf:80:71:
a6:93:9c:74:a0:c9:0f:01:93:74:b9:7c:c2:4e:c2:75:78:4b:
bd:63:db:5e:b6:6d:bd:c8:5f:49:f0:1f:64:45:19:a8:f4:4e:
40:69:8b:8e:4d:2b:d7:e7:93:52:0b:36:81:ed:1a:a4:32:93:
0d:86:ff:04:27:1d:b9:76:28:f5:ae:c4:5c:48:4e:79:61:e5:
57:5f:05:6d:a3:49:6a:06:81:f9:51:1a:fb:54:f6:6e:e5:43:
b1:93:ae:00:54:50:07:fa:20:c3:4e:dd:61:79:f6:66:18:7c:
4d:c0:5f:f2:72:f9:f8:3b:1d:3a:48:f3:81:b3:c0:5a:cd:be:
84:8f:4f:e2:f6:37:a4:c3:9d:da:a0:9a:d9:4f:82:7e:0f:e8:
eb:17:be:7c:c6:60:b3:41:45:a3:0d:89:c1:95:fd:09:74:cb:
ef:0e:34:35:35:50:48:1b:ff:94:2a:80:c9:a1:85:8e:44:8c:
4c:f7:ec:3b:fd:c4:ec:ea:c8:c3:db:3f:a3:00:a5:a6:fb:d1:
8b:c7:18:b7:23:f1:55:74:b3:c6:0f:56:58:59:b4:cf:b2:f5:
ab:71:d4:b4:af:fd:d2:76:fc:03:5c:3e:cc:3f:8c:7e:02:5e:
c8:44:47:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:47:26 2024 by rpki-client on console-ams.rpki-client.org