Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ME1wbXWbAhMRT7MZy1kzFdfjQJs.cer
File: ME1wbXWbAhMRT7MZy1kzFdfjQJs.cer (raw, json)
Hash identifier: Q8wpljDHlMl+pemBIDMvYN12A+T9Y9XnLXAf+bk48/A=
Subject key identifier: 30:4D:70:6D:75:9B:02:13:11:4F:B3:19:CB:59:33:15:D7:E3:40:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42539330748FD5D21BA512F238DB9CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/4bd00a-83ce-4134-b592-7243d9347143/1/ME1wbXWbAhMRT7MZy1kzFdfjQJs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/4bd00a-83ce-4134-b592-7243d9347143/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.236.40.0/22
IP: 2a0d:2b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:39:33:07:48:fd:5d:21:ba:51:2f:23:8d:b9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=304d706d759b0213114fb319cb593315d7e3409b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:44:8d:d5:2e:a4:41:ec:17:1b:48:ed:e3:a1:
84:2a:a6:4a:ea:9d:6f:df:f0:4f:98:1b:d0:bc:75:
47:8e:69:da:b9:98:86:4c:3a:b0:11:cb:7a:a6:34:
33:3c:5f:f9:62:97:b1:2e:b2:64:25:bd:2a:31:9e:
a1:23:d8:e7:bc:db:8e:29:cc:d3:d0:cd:c5:ac:5e:
c9:e5:b7:17:61:2c:b3:13:12:4b:d7:a3:59:be:a2:
7c:34:7e:72:94:3b:f1:3c:0e:62:2f:f4:c3:37:ac:
d5:04:09:60:fb:f3:b6:61:33:4a:49:f9:31:ba:07:
6b:27:ca:d7:64:8b:73:39:98:fb:77:16:26:6c:85:
92:91:c6:02:f4:e0:30:09:0f:23:aa:70:fb:4e:07:
26:f0:97:35:b6:bf:8d:60:7d:f8:a7:a1:e5:3f:5b:
5c:29:12:7e:c9:f0:8f:5e:9b:a7:d1:fa:e6:ea:06:
39:d5:39:a9:9e:c2:d2:d2:ff:21:1f:43:18:59:ab:
6d:ab:12:e4:12:fd:0e:a9:38:7d:60:95:99:50:00:
8b:6b:7e:c5:cb:0d:f6:03:ae:16:69:f3:d5:fc:dd:
33:c0:98:ee:43:40:1b:cf:d0:26:ca:64:4f:63:5e:
6f:aa:c0:ee:b0:d5:38:6f:2c:2e:a3:18:9b:37:99:
e6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4D:70:6D:75:9B:02:13:11:4F:B3:19:CB:59:33:15:D7:E3:40:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4bd00a-83ce-4134-b592-7243d9347143/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4bd00a-83ce-4134-b592-7243d9347143/1/ME1wbXWbAhMRT7MZy1kzFdfjQJs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.40.0/22
IPv6:
2a0d:2b00::/29
Signature Algorithm: sha256WithRSAEncryption
ad:68:2e:a5:90:b9:96:de:5f:5a:36:26:0e:29:fe:2c:47:5c:
98:76:65:22:ec:8f:d8:e5:3e:57:49:27:30:60:02:16:e4:04:
32:1e:47:50:37:1b:25:33:5d:af:4f:b0:49:98:e6:6e:d7:b1:
a6:eb:d6:0e:d7:fb:ff:83:7c:34:0f:1c:1e:f2:26:a1:e0:a4:
b8:ee:36:86:e5:55:e1:ce:b2:dd:2f:4d:c4:e5:2b:d8:b9:af:
83:1a:5b:f6:6c:2f:c1:e1:c6:04:50:a3:d9:ff:c8:99:ee:60:
f1:cb:85:eb:f4:5a:c5:3d:b3:84:cf:eb:1d:26:3c:b9:24:85:
10:76:53:62:03:90:9d:d6:69:5f:8d:cd:d6:13:ce:b0:8c:98:
3b:49:27:31:83:b4:21:6b:08:09:77:2c:9a:3c:28:57:d4:c4:
1f:94:ca:46:03:c8:8f:e4:ce:b7:7e:4c:83:6c:20:48:8a:a2:
ac:56:0c:4f:72:d9:4d:70:be:2d:7d:e6:ed:5a:4d:e3:7b:d6:
91:93:09:ad:f0:6c:00:eb:9f:de:26:6b:96:6b:eb:f5:f3:e5:
38:6a:5b:ca:76:16:3f:af:d8:e3:ae:e5:3a:69:15:5b:bb:29:
f1:4d:00:7e:13:22:6b:89:1a:68:2f:85:c5:34:5b:03:b1:65:
80:bb:c0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:29:54 2024 by rpki-client on console-fra.rpki-client.org