Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
File: IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer (raw, json)
Hash identifier: El3MOGAIHNOEFeKt6FgH4TDIL5R8arAyRqji/G8+JhU=
Subject key identifier: 21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC3D356E62D2B080E4FF256C0D59D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.180.184.0/22
IP: 2a0a:db00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:3d:35:6e:62:d2:b0:80:e4:ff:25:6c:0d:59:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=219885ea020e65006314ee9480def3b3efc039e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1d:f4:f5:e0:7e:8a:f6:9e:62:df:3a:5f:95:
e0:61:53:76:bd:36:e3:91:b1:0c:32:a4:d5:36:f1:
dc:89:3d:76:0a:de:07:a7:4e:83:ea:dc:29:ea:e4:
eb:40:d3:45:90:c3:bd:38:7f:8d:31:68:32:f9:c0:
45:15:ea:16:89:c5:b3:b6:8a:4c:55:32:cc:4e:49:
29:69:8e:13:9a:fc:6e:0c:91:45:a1:0c:67:67:f6:
24:0c:c9:a5:8e:58:a7:87:60:9b:a5:c2:61:bc:67:
19:16:64:5d:7b:e3:8e:bd:46:18:f1:4f:e0:06:09:
8e:33:eb:d2:85:63:1c:2b:f0:1b:73:23:66:e8:f6:
ee:65:3d:a9:42:d8:13:f5:64:a0:a3:b8:63:6e:6a:
4a:7a:6d:1b:50:d9:cc:bd:42:38:d2:b3:83:f0:8b:
20:66:94:99:57:43:44:9e:75:5b:8b:d9:dd:76:df:
a8:9e:12:02:25:87:74:aa:12:7f:5b:1c:42:ba:62:
cd:f4:27:b8:e3:c3:0a:e0:75:24:83:b0:ca:98:6a:
c5:de:13:33:d8:07:ed:d7:00:24:18:92:d7:c1:d0:
75:ee:e3:ff:a2:c9:5f:1e:95:6f:e2:c4:a1:1f:b7:
a1:fd:cf:af:4d:8d:53:df:17:a5:1d:1b:b1:e6:51:
19:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.184.0/22
IPv6:
2a0a:db00::/29
Signature Algorithm: sha256WithRSAEncryption
54:9e:38:22:52:0f:3c:52:c9:b3:a3:3a:21:11:94:e3:05:5b:
f8:17:92:cc:35:94:08:1c:81:f1:37:5c:31:68:f7:f3:d4:ab:
a8:6f:c3:0c:fa:e5:02:5e:b1:14:42:1e:1c:bd:9d:25:4f:c7:
44:cc:a4:c1:73:16:26:a0:27:fd:e0:87:1a:ba:c8:92:0d:18:
9f:a7:64:7a:cf:a7:16:42:67:e6:39:e0:59:e8:3b:bc:39:81:
7b:5d:7e:e7:02:9e:bf:78:95:e4:a5:2f:00:9f:71:da:a4:b4:
5a:65:d4:52:8e:1f:5b:6f:8c:89:82:2b:01:a1:6b:b1:6b:f1:
d2:62:c0:4a:cf:71:2b:c8:b3:5e:fc:7e:84:66:96:81:aa:56:
66:ba:b1:42:6e:aa:75:59:73:c5:40:3e:5d:67:7c:60:42:be:
32:7a:49:39:fe:d7:24:f3:43:ed:a3:79:57:ef:7f:f9:e5:fe:
2c:f1:c7:9f:27:07:ed:94:ef:2d:a8:c1:37:d0:ed:5e:b7:e4:
6f:a1:f1:c8:e5:c3:4d:eb:2a:9a:0b:c5:d6:47:95:4e:a5:56:
f4:60:97:fd:2d:f7:a8:8b:9c:c8:db:9a:80:e0:66:70:0a:94:
bc:70:0f:cd:7b:2e:f0:3e:e9:37:5a:3b:b6:35:f0:67:2c:89:
ed:4c:ad:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:23:15 2024 by rpki-client on console-fra.rpki-client.org