Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer (raw, json)
Hash identifier: 9YutRIwSQ2QC0DZ2WG7rY4dE3fw+O+XrfvtAE2hjCl8=
Subject key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC493304D766155C3FE0803A11F6C346F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.13.28.0/22
IP: 2a03:9b40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:30:4d:76:61:55:c3:fe:08:03:a1:1f:6c:34:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33d2d885477d0280264e458eb071f45d91691520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e4:e6:b3:c0:7c:cc:df:62:f1:d8:ae:12:2f:
b9:a4:f0:37:3e:f3:7c:8f:8d:a3:3d:97:22:31:0c:
8e:95:a4:53:05:76:88:66:ec:2f:1b:ac:bb:8d:4f:
dd:fe:31:e2:a0:9e:74:c5:2f:1e:6f:c6:b3:da:59:
9c:9d:b7:b8:dc:83:b9:3d:76:cf:22:eb:29:44:e3:
be:a1:22:78:6d:01:81:34:17:30:a1:49:5f:fd:52:
b7:70:43:9e:fa:59:81:1e:fe:39:17:4b:fc:2c:20:
0b:61:dd:68:14:40:82:ba:5c:cd:90:14:ba:e1:cb:
4d:d3:13:a2:eb:b5:98:d1:ac:17:ed:a4:c2:3c:88:
e9:6b:5f:54:92:cb:d5:db:d2:6b:68:2a:e1:ec:b7:
91:92:ab:2a:49:c7:44:19:f3:2f:c3:b5:93:cb:b8:
a8:a6:25:de:7c:09:31:51:1e:50:25:88:cf:1c:46:
41:56:03:a3:2e:cf:71:c4:09:e9:f8:e3:d1:f9:e0:
93:d0:0f:85:b7:8a:e3:2c:6a:13:fa:83:0a:56:92:
86:03:0e:c5:a2:68:81:f6:5b:84:c3:10:04:7b:4d:
09:dd:5d:56:36:a4:0e:ee:56:24:d8:46:f9:15:8d:
c4:e0:cc:ff:a0:02:10:9d:28:35:cf:18:af:61:16:
35:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.28.0/22
IPv6:
2a03:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
65:76:ea:a2:f3:4e:60:d6:df:dd:e8:91:f2:da:67:a6:f4:09:
74:22:74:4f:89:e5:cb:e7:0d:a3:80:d3:31:84:c5:69:f9:f5:
35:1a:6b:7a:36:de:80:00:61:d7:05:16:34:0a:96:ad:5c:07:
7e:89:f6:19:8c:bf:95:4a:0c:b9:86:6a:82:89:8f:02:7e:87:
30:c1:0a:31:e0:c2:51:cb:c3:c6:a3:3b:44:cc:cb:30:b8:a5:
b0:e7:93:c8:f2:a3:f8:90:e1:f1:53:82:1a:b8:62:54:48:7b:
23:b1:df:cd:06:49:de:34:7f:a7:4b:57:c2:e5:98:37:b6:67:
eb:a5:83:cc:14:df:f2:d9:5f:42:f2:89:01:31:ec:70:4b:31:
cb:10:c5:4e:f4:85:c8:a4:55:89:be:de:9c:74:36:65:f9:a7:
80:7c:64:42:dd:83:27:a6:63:b5:59:19:0c:38:32:7b:3c:d6:
31:79:4a:36:14:01:2f:9e:03:d0:fc:14:2c:64:b0:21:37:a6:
85:97:55:ea:c8:47:9b:ae:45:68:c9:b7:20:f6:f6:8f:19:bf:
c1:49:1b:18:18:a6:67:55:a8:c4:bb:ad:bb:03:cf:c4:83:ec:
d2:4d:56:19:e9:c7:13:61:c1:a3:4d:20:e8:8e:a9:e4:ce:8f:
8a:7d:c4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:40:42 2024 by rpki-client on console-ams.rpki-client.org