Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer
File: MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer (raw, json)
Hash identifier: 1+qTxMEMYD+DnyECxNDthed7xLxaN2gjt5nfYOL41Og=
Subject key identifier: 30:4A:A2:58:22:4F:A3:C6:7B:AD:1F:2B:9F:9B:28:A6:5D:95:FE:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B5DE4B26E29752475EA1AB2A40F34
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.72.36.0/22
IP: 2a05:3840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:5d:e4:b2:6e:29:75:24:75:ea:1a:b2:a4:0f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=304aa258224fa3c67bad1f2b9f9b28a65d95feae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:ab:0f:61:d7:5c:db:fb:07:83:63:af:c1:
35:a2:2c:0b:fa:c9:aa:0b:63:a4:b3:0d:f0:c4:92:
88:6b:fb:4f:d7:be:5f:f0:af:83:0f:48:73:dc:49:
dc:8a:86:55:d5:b4:02:53:59:94:2e:d1:5c:53:32:
fb:e8:bb:89:87:73:a7:7d:6e:b2:d3:db:29:ce:e7:
c3:f1:9c:23:53:5e:6f:ed:66:87:a1:86:6a:68:98:
74:03:df:f5:a5:00:53:14:aa:54:10:8d:4c:1a:cb:
e5:7c:f5:14:3a:6a:eb:7e:03:38:35:be:52:ea:06:
d8:6d:5c:11:55:ce:26:2f:d6:5b:96:d5:eb:8f:47:
4c:26:b3:35:af:00:64:7e:cd:0b:b1:2d:09:a0:79:
8a:ab:2f:4f:2d:70:32:9d:bb:a1:cd:28:e7:74:91:
62:27:54:95:b2:44:52:6b:60:68:db:5c:35:ad:43:
6e:cc:63:a0:94:04:d0:2b:00:4a:d4:88:43:5e:13:
93:31:00:8c:c3:a4:b5:2c:ec:2f:a6:7d:38:38:61:
e6:99:7e:a6:cb:ab:ce:4c:97:cb:28:dd:1a:25:08:
04:73:13:6d:e2:27:2f:89:69:63:28:c6:95:ee:93:
4e:b6:e2:b2:d9:63:3b:8c:70:6c:73:70:a6:79:78:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4A:A2:58:22:4F:A3:C6:7B:AD:1F:2B:9F:9B:28:A6:5D:95:FE:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.36.0/22
IPv6:
2a05:3840::/29
Signature Algorithm: sha256WithRSAEncryption
5b:c3:7c:34:f1:a0:5a:4f:ba:0b:a3:b0:8e:26:fb:8f:2a:ba:
b0:bf:26:6a:09:7c:e5:d4:79:56:47:88:d4:86:f0:00:69:e1:
0f:60:16:b3:51:db:c1:f7:fa:20:91:2d:22:11:4d:9d:c7:88:
20:3c:0b:1a:2c:5f:c6:be:27:a8:e6:7b:b9:47:50:13:ee:e4:
bd:d6:47:2c:8e:3c:d8:13:50:c5:89:24:63:3e:23:c5:42:d6:
99:32:c7:e6:13:26:2f:1f:f3:38:54:18:52:97:d6:38:35:f7:
bd:15:3b:79:64:19:87:c1:91:0d:d6:69:a9:8d:d5:41:74:d3:
e5:db:16:f1:5b:bb:76:47:d0:26:c5:e3:af:bb:1c:84:56:f4:
a4:8b:56:0d:b7:c6:a1:d3:68:29:de:fe:de:0a:7e:65:9e:d5:
29:ff:2e:a2:06:21:03:76:99:d8:90:f1:85:7b:36:95:4d:86:
22:6b:bb:3f:7f:e9:9b:5f:11:54:6d:61:5c:da:20:d6:f7:bc:
52:eb:77:69:9c:10:51:34:87:bf:28:c5:4b:8e:64:17:b8:2d:
ff:6a:db:08:4b:bd:8f:9a:c1:20:1e:73:87:8f:ef:50:45:58:
8b:07:2e:39:56:c0:3c:68:8d:85:69:09:1b:9c:95:57:99:86:
ca:15:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:41:55 2024 by rpki-client on console-ams.rpki-client.org