Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
File: M8Ww18CpzSS3PNy5LIdG6FpKW48.cer (raw, json)
Hash identifier: z/7+YiOUgN69ft5V59yrGZoYX5gdn8tPTAuzInfzJ2k=
Subject key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E5B0CB5565438500AF13A71547852
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.149.107.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:5b:0c:b5:56:54:38:50:0a:f1:3a:71:54:78:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4b:e9:c1:ab:68:49:b4:c1:8f:8e:cc:65:2d:
0d:10:f7:dc:1a:5d:67:c9:14:32:36:ec:af:11:85:
8a:57:f7:ef:5d:c7:49:e5:07:6f:5e:0f:81:9e:21:
23:f2:b6:74:fd:83:93:9c:83:ac:ac:57:90:cd:0d:
36:97:01:70:f5:99:4b:c2:60:f0:5f:8b:74:f3:f7:
31:a8:38:a0:5a:1a:c0:b8:5a:32:95:61:35:61:8e:
54:cc:7a:cc:5f:7c:ec:40:2d:65:ab:47:1a:26:6f:
f4:28:3e:66:25:26:ac:82:26:fc:fb:5f:1f:0c:ba:
58:d4:40:56:b3:78:0e:45:dc:02:7f:cf:1a:1d:f7:
af:64:7e:e9:9a:32:41:cb:28:4b:88:cf:d3:f8:81:
81:c0:a1:40:f7:2f:ae:f5:31:48:7f:e5:d8:f8:cc:
26:cf:21:c3:37:5e:c1:05:be:93:c0:7c:47:7e:60:
82:38:03:ef:01:e6:e9:87:a2:dc:0f:c8:52:63:4d:
5b:7b:98:a2:79:c2:99:ca:e3:c9:55:bd:a4:47:ec:
60:cf:36:01:b5:83:07:a6:c7:f0:6d:84:d9:97:80:
84:85:ba:ee:47:66:75:87:a3:9d:72:a1:d2:ea:8b:
08:e0:6f:58:25:1b:05:dc:e8:dd:2b:3d:2d:19:1b:
7d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.107.0/24
Signature Algorithm: sha256WithRSAEncryption
66:26:6f:e6:2c:7b:09:32:c9:fb:da:e0:2f:01:32:c3:b4:d9:
91:75:25:b3:4e:2f:83:ed:4d:b9:99:b4:c9:5a:d0:06:8d:4a:
66:12:75:43:ca:89:fb:63:03:8c:9b:5a:58:b3:43:d6:67:54:
3e:0b:8d:df:b4:56:2b:c5:64:6b:2e:fb:ef:dc:dd:2f:6a:4e:
54:0b:0d:3a:f5:09:44:88:e1:69:2a:83:2d:7d:4c:2d:a7:56:
1f:cd:a4:fc:6c:99:ba:1c:9c:62:2f:0d:2f:0e:97:66:00:a0:
9d:e6:07:6f:cf:08:93:f7:60:15:f4:53:72:8e:2f:66:00:0b:
fb:e5:6a:1a:d2:d0:25:75:f6:6f:b6:3b:ec:33:52:29:72:26:
97:1b:9e:7e:29:0a:67:c7:9a:62:1d:a4:41:0e:0a:8e:36:f8:
20:8a:19:45:b4:d8:c3:a3:c0:1e:d1:4f:5e:4d:fe:b2:ee:3f:
e1:c9:f8:27:58:8c:d2:34:cf:06:ce:0c:b7:60:65:5c:b5:20:
7f:b2:21:35:e0:62:8b:80:85:5a:5f:6f:bc:9b:e9:b0:d5:25:
a4:b7:21:52:60:61:36:b6:a9:a6:47:a8:87:b5:03:93:e4:3b:
5d:5a:4b:b9:4f:70:4b:45:10:ef:26:f0:27:ab:44:ba:ca:4f:
07:40:ca:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:29:50 2024 by rpki-client on console-fra.rpki-client.org