Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IBesiOMgcueKq9vmrSWiYLHZOU0.cer
File: IBesiOMgcueKq9vmrSWiYLHZOU0.cer (raw, json)
Hash identifier: YJe6UD1Hq+g/few1m8zuTVR54LOdxJ+IlUVGoUHIJuI=
Subject key identifier: 20:17:AC:88:E3:20:72:E7:8A:AB:DB:E6:AD:25:A2:60:B1:D9:39:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E61A11DF0F6BE12294CE1B5B70B3C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/158ab0-1897-4d22-8ac3-41b50b1d7344/1/IBesiOMgcueKq9vmrSWiYLHZOU0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/158ab0-1897-4d22-8ac3-41b50b1d7344/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.147.224.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:61:a1:1d:f0:f6:be:12:29:4c:e1:b5:b7:0b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2017ac88e32072e78aabdbe6ad25a260b1d9394d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:27:c1:4f:0f:25:aa:5a:f9:70:ab:cf:82:51:
cc:14:7d:ad:33:dd:89:d6:3f:fd:d9:ca:6b:d9:d5:
5d:e0:5a:9e:5d:3a:01:a1:44:0e:3b:f3:b1:dc:1a:
66:b5:46:63:dd:ae:bf:9c:ed:30:7f:7e:23:cf:ee:
05:1b:7e:2f:d0:af:c5:95:dd:77:68:bb:f9:16:46:
c9:38:e0:c5:cb:24:44:5a:03:6e:42:e7:8e:93:9c:
74:19:dc:85:a3:fa:8f:ce:87:0d:11:8a:61:5e:e9:
25:34:72:b9:e3:01:ca:d8:bc:4f:9f:d7:7c:bb:94:
67:78:70:e8:33:fa:b4:eb:48:f8:19:a5:27:39:cf:
60:a5:3d:68:d9:60:5d:7a:40:46:73:87:85:25:c2:
a1:58:f3:c7:04:25:e2:b7:1b:32:96:de:4f:01:c2:
cd:79:5f:0e:ea:6a:53:a6:00:5b:48:d5:bb:ad:ba:
0a:58:ac:7a:c5:c9:c0:0d:38:15:43:5c:81:cb:38:
e4:fd:bc:13:6c:f1:6b:8b:0a:05:59:de:fa:af:6f:
e3:87:1a:63:7a:07:8f:dc:87:a9:60:b6:79:e0:c6:
58:2e:d3:d8:47:cf:45:f4:dd:fa:a0:d8:dc:8f:ee:
7e:1f:44:c9:0e:8a:b8:33:70:e4:e6:43:40:d7:22:
44:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:17:AC:88:E3:20:72:E7:8A:AB:DB:E6:AD:25:A2:60:B1:D9:39:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/158ab0-1897-4d22-8ac3-41b50b1d7344/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/158ab0-1897-4d22-8ac3-41b50b1d7344/1/IBesiOMgcueKq9vmrSWiYLHZOU0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.224.0/24
Signature Algorithm: sha256WithRSAEncryption
62:1d:7f:bb:e9:63:0c:d9:56:77:f8:19:4b:93:9a:a3:12:47:
68:26:92:cd:19:03:21:4f:c9:cb:e5:74:75:0b:d3:3a:90:b8:
52:10:e6:b9:52:1b:ee:f0:b6:62:1d:04:da:c6:4d:e0:03:a2:
3d:f1:15:1e:55:4e:8b:dc:7e:11:6f:82:c7:a8:0d:5a:45:ae:
db:97:1c:e3:8f:7a:73:b4:93:5d:7a:db:4d:16:12:83:9d:18:
93:b9:b0:eb:59:6c:3e:f1:5e:98:9e:02:d6:1a:14:c4:de:3f:
39:19:96:99:fc:85:87:4f:2f:77:4c:e6:53:a4:76:47:18:34:
08:22:49:11:f9:df:3d:f2:e2:e5:55:d7:01:b8:58:33:3b:8c:
90:29:91:bf:a4:1c:5a:4b:b1:8f:bb:3e:ee:5f:e3:ab:c3:18:
0f:08:43:34:40:c2:95:a0:9b:c3:63:d3:14:12:11:38:67:a2:
56:00:7e:4d:cf:92:17:22:7b:4c:c0:5e:ff:c6:3f:60:79:db:
f2:22:e2:61:c3:f4:a3:d2:c0:09:e9:13:a2:3a:47:12:4c:b8:
02:28:86:d6:c0:aa:e5:a1:1c:3b:cb:64:04:89:d2:7f:cc:0c:
fb:2b:ab:ef:5b:ff:46:70:54:f7:46:b4:3f:ba:26:f6:84:78:
a8:89:34:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:39:32 2024 by rpki-client on console-ams.rpki-client.org