Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer
File: IY2yiCPzcIslWqEkum73QdET6vM.cer (raw, json)
Hash identifier: +9yEk4z9AaK5TI127BCzIJyAd9Q6pu8CIqyvNz0Plw0=
Subject key identifier: 21:8D:B2:88:23:F3:70:8B:25:5A:A1:24:BA:6E:F7:41:D1:13:EA:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4938F6D9072D357A427917E4DE2F7B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.48.184.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8f:6d:90:72:d3:57:a4:27:91:7e:4d:e2:f7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=218db28823f3708b255aa124ba6ef741d113eaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:5c:54:d6:5e:38:3c:d5:88:ac:be:16:39:
32:60:94:b6:cf:28:fa:7b:8b:15:7f:5a:79:f1:1d:
8a:11:6d:b3:70:7a:b8:5c:3b:ec:e5:90:ba:0f:50:
fa:76:91:92:f5:86:47:7b:60:a4:00:3f:32:44:5b:
25:68:05:9e:d3:f0:55:54:9e:2d:94:30:a2:a8:50:
04:49:c7:23:ea:11:84:ab:f3:b5:57:ae:8d:a3:03:
19:d3:77:20:6e:45:ce:54:1b:a4:b9:a8:62:4b:20:
f0:4c:a1:43:1d:a6:99:1c:50:14:06:df:46:69:20:
ee:bf:7a:0d:ab:3b:7d:19:fd:8a:d9:92:20:87:d8:
40:3d:a1:98:44:92:b6:c3:d9:fc:2c:6d:4f:d0:60:
7b:d8:5a:85:cf:9d:1d:18:32:03:76:fa:2c:e6:b2:
f7:01:34:a2:ab:df:11:53:67:4d:f0:8c:dc:73:3a:
93:b0:51:28:97:70:5b:5d:de:fc:2a:24:12:41:df:
29:1c:42:35:60:ec:c1:06:d0:5e:1d:bb:f3:64:52:
2a:ce:f0:2a:b2:fa:81:33:14:fe:df:70:ad:ec:ab:
39:ce:64:c2:b8:4f:e9:5d:59:65:50:08:8a:9d:45:
eb:13:23:90:f6:2f:b4:28:8d:d1:10:b1:6b:83:ba:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8D:B2:88:23:F3:70:8B:25:5A:A1:24:BA:6E:F7:41:D1:13:EA:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.184.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:53:bd:e8:67:8d:0a:f9:d6:90:a2:10:c1:ed:9d:95:4f:38:
c6:69:ba:f7:95:2d:da:3e:a6:7f:fa:e7:81:b4:58:9b:41:c8:
79:70:b0:58:b7:60:56:e1:e0:53:4e:7d:d7:44:36:0b:ff:4e:
98:a9:5e:c7:18:4c:af:07:04:47:a7:3a:86:6a:8c:59:c1:92:
39:ea:f8:a1:1f:b5:d9:b3:e8:04:36:ce:5f:2a:31:69:c9:ed:
71:fc:f9:8e:2e:23:bb:f4:0e:f2:02:08:4b:0b:e0:1c:2b:24:
c2:a9:db:ea:a0:ec:87:8b:ee:42:29:af:9a:be:a2:04:7d:ab:
95:99:73:3b:82:cd:8e:98:88:62:3c:c6:34:62:1c:f5:0e:92:
bb:a5:26:95:dc:06:a2:43:da:29:df:21:6b:68:21:2f:96:3e:
cc:5b:c3:c0:fa:af:5d:1f:0c:15:68:f7:6a:7a:2e:5a:63:b5:
45:2c:87:08:f4:be:a8:4f:6c:c7:70:cb:e2:e4:1b:ea:f3:2c:
f0:94:cb:02:6e:3a:6f:7c:04:69:a4:4a:17:3b:13:99:fb:41:
06:57:29:4a:9b:8b:a6:26:a5:c8:c1:e1:1f:eb:cb:77:bc:f2:
a6:bd:85:cf:0b:23:a5:31:b0:b2:d2:5b:30:8c:c7:7f:33:e9:
41:14:69:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 20:47:35 2024 by rpki-client on console-fra.rpki-client.org