Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
File: FqX_fn4arzjlmWnWCYBKOz8Fvog.cer (raw, json)
Hash identifier: L4OjNYRzPk0Y1pz6gJShxGXyxCOf9GlutyENo++GM7Q=
Subject key identifier: 16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01900740DEE81EC0BA0BB98C20C789A093AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 11 Jun 2024 12:23:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.84.75.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:40:de:e8:1e:c0:ba:0b:b9:8c:20:c7:89:a0:93:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 11 12:23:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3a:13:e4:6d:92:bd:27:6c:7e:b1:85:b0:eb:
ea:d2:51:a5:aa:8f:a2:b2:26:ba:14:b0:c1:01:21:
f2:14:6a:78:0b:25:dd:0f:f1:ee:25:5e:d1:d5:5d:
43:76:7e:65:98:01:41:11:d2:b4:e8:ed:a1:35:b2:
1a:4b:53:a7:fb:a9:60:f8:ce:7e:f8:4c:9f:f6:d0:
2a:52:2d:9e:9d:42:32:ce:08:a6:33:92:fd:58:1b:
be:e2:ca:76:da:0e:a9:a7:11:f9:99:62:e0:b6:5d:
a3:33:10:d9:cb:57:e6:8e:b5:56:89:1a:43:48:6c:
5a:ee:c6:e0:e5:94:78:a2:a7:a8:7c:e5:4a:b1:f3:
fb:c0:7e:ad:fa:b2:e1:06:04:a0:0a:17:fe:9a:7e:
dc:4b:28:a9:e8:77:93:8b:ca:d8:8f:83:0c:33:65:
6a:bc:bc:80:b3:04:a1:58:11:26:34:89:13:03:1e:
5a:2d:c4:62:3d:0c:a4:8f:79:0a:67:39:1e:86:01:
d3:dd:3a:99:bf:ba:a6:fc:92:59:60:e8:b4:f2:b9:
cc:72:e6:5e:92:54:45:b7:07:69:dd:31:c1:c6:6c:
ac:88:79:b3:9b:76:19:0b:45:67:f8:aa:37:44:1d:
eb:42:b6:7e:43:d9:ff:0b:22:49:8f:61:53:0b:a0:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.75.0/24
Signature Algorithm: sha256WithRSAEncryption
96:8b:63:ff:0a:23:97:46:ba:15:3a:82:71:4c:58:96:3b:54:
37:f7:e8:82:26:c5:9c:c1:65:e5:58:84:d3:fc:b3:3b:65:65:
8e:34:0c:b8:a7:cb:5b:af:95:f8:19:b4:b3:7f:61:57:88:b0:
2c:9f:7f:1e:60:3f:25:1c:9a:00:a0:87:7f:8c:5a:1d:b5:53:
09:7f:b1:3f:5d:ed:22:62:d8:c8:2b:80:56:f3:a2:b2:f2:0d:
18:af:74:9c:9a:82:c1:c7:96:71:12:78:a0:ee:72:5a:f6:31:
5b:83:7f:4c:c9:f5:bc:94:a0:79:46:dd:66:59:cf:41:d9:39:
bf:46:9a:f9:53:be:86:0e:b6:20:0f:e3:16:d4:2e:5d:41:9a:
4e:a8:64:f4:1e:ea:3b:41:ca:05:7f:a3:0b:6d:37:31:66:21:
f4:58:aa:91:08:13:45:92:f8:5c:c1:5a:45:93:16:94:bd:3d:
19:91:e6:49:0a:99:37:d6:c2:b1:5f:4a:07:6e:2d:8b:fc:9b:
b5:19:d2:49:5e:ed:37:9e:a1:ae:7d:fe:90:39:1b:ff:22:66:
d8:8f:fb:54:c6:cc:3e:76:15:f5:c3:65:94:28:c8:fa:eb:49:
e9:9a:59:14:49:75:6a:76:4c:ec:72:9b:ea:09:67:49:1a:f1:
9f:7f:ae:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:00:00 2024 by rpki-client on console-fra.rpki-client.org