Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KYm1iRINOeoU_1OWO_IxV9Mkleo.cer
File: KYm1iRINOeoU_1OWO_IxV9Mkleo.cer (raw, json)
Hash identifier: SkpUkKFPmXCczEpFkJbpcvt4QSxLqRMPbsBu4dzHW9c=
Subject key identifier: 29:89:B5:89:12:0D:39:EA:14:FF:53:96:3B:F2:31:57:D3:24:95:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2B75195803A70818C722E09B164C50
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:34:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.8.240.0/22
IP: 2a0c:7c40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:75:19:58:03:a7:08:18:c7:22:e0:9b:16:4c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:34:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2989b589120d39ea14ff53963bf23157d32495ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fb:d1:20:4f:ff:7c:ea:00:49:9b:52:f1:6c:
82:cb:87:67:55:74:22:e3:e7:56:d8:aa:a3:35:97:
d3:75:ca:72:80:5a:68:e6:66:cb:de:55:16:c7:bb:
6e:c8:57:c0:5f:8f:76:c7:de:34:1c:99:13:de:37:
e9:18:55:9c:35:c1:4d:2c:32:62:73:e0:bb:eb:6b:
da:d1:f9:ed:a5:7e:40:bf:77:36:c9:93:d0:45:52:
37:f0:ca:12:d7:ca:28:64:6f:90:59:13:67:8c:6b:
93:81:a8:5e:0c:f8:8f:f2:0c:ca:56:67:3d:d9:3f:
0a:3d:74:86:31:cd:ce:29:d9:47:76:a7:e4:4e:f1:
24:ed:56:eb:62:46:dc:db:96:54:da:95:23:c3:5f:
47:75:12:50:a6:1c:71:c2:75:6d:d2:0b:4a:d1:41:
92:a1:90:dc:6a:3e:ea:ab:0a:fd:17:d9:a0:f4:d0:
e2:31:5f:f7:b3:57:1e:38:81:e3:85:ab:ad:0a:35:
d0:00:6d:b5:4c:03:5a:50:e7:74:b4:aa:5d:ee:60:
bf:68:a8:ca:ed:80:16:00:11:95:14:28:c7:0c:a5:
94:aa:6a:55:31:ff:58:33:87:53:8e:34:2a:f4:68:
fa:ae:43:f1:49:8d:9c:f6:8a:b9:1d:b8:36:49:8d:
11:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:89:B5:89:12:0D:39:EA:14:FF:53:96:3B:F2:31:57:D3:24:95:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.240.0/22
IPv6:
2a0c:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
32:d2:80:24:2d:b0:3f:3a:53:a0:d1:66:68:3b:79:1f:48:e6:
a4:1d:2c:af:f6:c2:87:36:be:cd:e5:97:04:29:e4:dd:df:7f:
13:ef:9e:37:8a:58:9a:ff:93:3d:1f:8c:90:be:aa:31:9a:47:
c2:69:8b:79:0a:08:78:9c:1c:61:d6:2b:68:bc:40:b6:7f:36:
61:07:0e:01:cf:24:2c:27:89:08:b0:17:cf:98:b2:bd:d7:c0:
86:02:0f:49:b5:d6:cd:31:30:ac:e7:c5:1e:3e:4d:a4:6e:be:
ee:ea:08:6a:98:7f:22:89:ba:15:50:46:cf:9c:67:5b:ec:47:
86:4a:46:e5:cc:cc:2d:e5:98:17:3b:92:cc:9e:39:7d:e8:36:
63:d1:6e:6c:c1:6c:8c:3a:d9:39:ce:30:6c:b8:7d:a8:a0:3f:
5d:83:5c:58:9a:fe:71:c1:90:ca:a5:e6:71:8e:37:ea:14:3d:
65:51:15:23:d9:82:3e:98:f3:d5:df:b6:78:8f:a5:9d:c4:cd:
d0:8e:44:c0:1d:eb:32:a6:d7:21:47:cd:75:ce:61:be:f9:04:
ed:d8:65:e3:35:3c:d1:13:a4:4c:54:b8:f3:71:96:5b:46:d3:
2d:bf:70:19:ec:fe:4a:f2:0a:2a:eb:91:12:bb:fa:d3:c2:fa:
03:60:44:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:52:49 2024 by rpki-client on console-fra.rpki-client.org