Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
File: KX75vv0afiTAzJcpmH_AZda3Ey8.cer (raw, json)
Hash identifier: vE842D1TLKZ4+8YiRydsbCc4h+l4/5h3gJlwRvFTdKs=
Subject key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DA3C04C37D64C15C3B0B0005FB93FA15D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 13 Feb 2024 18:35:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.10.208.0/20
IP: 185.23.236.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a3:c0:4c:37:d6:4c:15:c3:b0:b0:00:5f:b9:3f:a1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 13 18:35:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:39:bc:c5:6f:56:f0:ef:73:bc:7d:a0:db:
45:fa:b7:a1:78:29:1e:e7:b7:bd:9f:d2:30:cb:e1:
25:87:52:63:c4:57:da:ad:5b:b6:a5:65:54:69:87:
69:d9:d4:44:af:74:45:1d:15:b3:e1:6c:2f:61:b6:
50:fb:14:5d:b2:df:ab:bf:c0:b9:2c:be:81:35:c5:
92:66:c9:1c:a4:97:f4:7f:9d:6b:49:64:2f:aa:42:
cf:d6:90:e4:1f:a7:ae:b8:7a:2d:97:d1:d2:0a:15:
b3:83:8b:87:41:1b:87:f1:9a:2b:5b:e0:1e:51:d1:
53:6a:16:93:46:8d:63:ab:55:6f:13:5b:8e:7a:9d:
70:25:3d:23:62:26:97:ae:92:95:17:df:9f:da:60:
f3:00:1e:59:93:80:35:aa:c2:67:ec:2b:b6:11:03:
47:9b:6a:da:37:dd:c5:be:a6:7b:cb:21:b8:b5:90:
08:db:13:8f:48:44:05:36:85:ca:82:ca:ea:f2:76:
22:70:cd:ca:55:90:0b:25:5a:84:a8:8b:67:db:e0:
16:97:ac:43:90:f4:f0:37:27:f7:71:97:54:3f:a2:
fa:b9:46:38:74:8c:cb:95:ea:9b:6e:9a:79:f6:90:
47:d3:46:64:a8:a0:f3:24:74:96:12:ab:eb:1e:b2:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.208.0/20
185.23.236.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:35:ee:23:18:90:d2:2f:91:db:4b:7f:34:fa:6c:0f:57:e9:
51:be:3d:94:32:c9:4a:da:bd:81:32:29:f6:a1:b5:3b:96:19:
c9:a4:16:07:12:c8:d8:13:1d:dd:36:1f:7c:fe:24:17:32:ee:
f0:92:f3:14:dd:e3:86:31:b0:4c:5e:08:a2:2d:97:5c:e3:13:
5a:7a:4e:0e:3b:d2:1e:1b:c1:70:3d:24:e0:75:71:86:f6:54:
85:13:e2:b6:2f:7a:83:4f:84:8c:04:22:f1:9c:c5:53:1e:b1:
c6:25:02:30:e2:2a:ec:87:a0:b0:0a:52:8b:b9:b0:6c:c3:c5:
52:e2:44:d7:74:bf:1a:42:3f:91:da:b6:a4:dc:9a:77:df:65:
4d:16:39:b3:aa:6b:15:94:9c:c4:f3:23:d4:be:83:17:1d:9d:
94:c7:d3:9d:95:f0:5e:d9:15:28:26:52:14:f6:b2:59:c4:c5:
38:3d:9b:67:36:de:90:d6:7d:d9:a7:0e:48:6d:f1:2b:1b:3a:
56:b8:25:7c:bd:41:e6:15:5e:1b:1b:83:36:6e:75:75:ce:21:
21:21:13:c2:64:c8:6e:b3:b9:63:cb:9d:ff:30:d0:db:32:ba:
84:65:04:fd:c7:fc:1a:1f:75:29:d1:af:55:5a:0e:0f:03:bc:
4a:0b:9e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:40:52 2024 by rpki-client on console-ams.rpki-client.org