Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IYbEbjsYJreC0j5jBOUPEwFJT8c.cer
File: IYbEbjsYJreC0j5jBOUPEwFJT8c.cer (raw, json)
Hash identifier: 4qxEaUHB65609l6UdbHAEtHcDs1yjuO0yZNi3fpGr/0=
Subject key identifier: 21:86:C4:6E:3B:18:26:B7:82:D2:3E:63:04:E5:0F:13:01:49:4F:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC794C66ED98D037227AAA64A6B7D152B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/IYbEbjsYJreC0j5jBOUPEwFJT8c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.30.127.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:c6:6e:d9:8d:03:72:27:aa:a6:4a:6b:7d:15:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2186c46e3b1826b782d23e6304e50f1301494fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:66:fd:18:8f:a8:7b:df:d8:e4:c7:8a:ce:
25:54:96:9c:ce:5c:2b:12:14:44:f3:38:36:d9:e2:
c2:1b:cf:2d:ae:3d:ad:43:86:3c:98:1f:5f:41:0c:
19:d6:43:3a:f4:bd:23:70:d3:d5:85:67:14:e9:12:
5b:06:9c:f6:fe:bc:74:4a:f2:0a:82:0e:5f:c9:3f:
e8:1c:2c:8d:b9:0e:35:01:e1:33:5e:27:5a:12:fc:
17:43:cf:9c:56:1c:4e:24:95:29:84:f2:a7:bb:1b:
8a:72:c2:c5:b6:e9:00:3a:36:42:94:3c:51:d7:b7:
b0:ef:c3:6f:84:d0:ed:f3:04:57:05:17:fb:8b:18:
26:cb:74:35:ef:a6:0a:9a:ab:1c:7e:c2:63:62:29:
bd:0b:b3:f8:9b:55:e0:8c:4a:32:ab:0b:b0:ed:20:
2b:cd:ca:92:b2:79:58:68:05:41:bc:6c:c0:73:5d:
37:cc:5f:49:70:58:20:80:4f:34:d2:1a:ae:bf:d8:
7f:5b:86:16:02:bf:6c:a1:63:f1:63:69:71:bb:54:
2c:4d:fd:08:42:99:e3:5c:e0:b9:c2:26:01:ac:96:
8a:f3:0c:94:f1:c1:b3:1a:d0:14:d1:89:5d:d9:55:
f1:11:a1:34:84:21:35:b7:dd:11:c0:dd:ae:9f:54:
d8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:86:C4:6E:3B:18:26:B7:82:D2:3E:63:04:E5:0F:13:01:49:4F:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/IYbEbjsYJreC0j5jBOUPEwFJT8c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.127.0/24
Signature Algorithm: sha256WithRSAEncryption
78:85:70:ee:95:7c:b0:1c:37:6e:46:f3:33:f2:1e:cc:85:9d:
31:1d:0a:61:73:8b:31:a7:c6:09:6c:81:22:65:7f:b3:4c:34:
2d:c8:55:45:2f:c2:ba:dd:19:2c:9a:72:63:cd:86:e0:26:3b:
a5:c9:a0:6e:1e:67:d8:25:e3:38:48:d3:12:7c:12:45:a3:5b:
08:24:6c:ff:9b:82:56:61:4c:c5:8d:21:46:a4:64:72:48:2b:
9b:03:b0:2f:bf:40:9a:9e:cc:54:d8:9d:d0:d0:dd:c6:a9:5f:
b5:78:b7:c1:0c:fc:43:89:ad:97:02:9e:53:88:0b:78:36:de:
99:12:4d:41:f4:c1:8d:40:de:7b:90:0d:36:8f:89:05:e4:2c:
da:cc:80:c1:a4:5f:84:18:48:70:4f:9b:e0:b6:ef:f5:7d:30:
f8:89:87:82:ad:0b:3d:9d:ac:7c:87:f2:d9:1d:7f:79:75:f6:
0f:61:d5:f1:ab:e4:28:75:72:9d:b3:da:ab:32:61:59:5b:78:
dd:b1:65:c7:29:92:06:bc:aa:94:3a:49:75:86:65:32:78:17:
a5:a8:34:e2:0b:a7:9f:86:a0:c1:4a:98:aa:6a:44:40:06:c7:
04:8d:9e:98:ba:c4:42:b0:e7:03:e9:31:ba:88:99:83:c6:1e:
3e:2a:d0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 19:14:43 2024 by rpki-client on console-fra.rpki-client.org