Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
File: MHR0lP9OJleNneq-LubQBLP-LYw.cer (raw, json)
Hash identifier: ZQ1Lkqba8yvWGR7H3EbsQ/aOjq2u18EuHEX/pleHxUk=
Subject key identifier: 30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC4574954360A8948E322A64714D64
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.31.108.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:45:74:95:43:60:a8:94:8e:32:2a:64:71:4d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:15:9e:dc:bc:cd:13:d2:d2:5f:8a:78:0a:
b2:91:91:a3:ec:97:1f:94:85:08:b2:53:79:03:34:
36:fb:5b:55:c6:0c:e6:c2:73:1b:fc:32:a7:f9:42:
26:e1:9b:ef:12:3e:9f:b7:8d:f6:e5:1a:bc:d4:7e:
16:ca:6b:72:fc:38:e2:e7:a7:8e:0f:95:52:bc:35:
a6:83:bd:81:48:6d:0f:72:b8:9a:53:08:16:bb:b6:
ac:ab:83:e6:1d:b4:7b:2f:23:6d:e6:18:6b:c2:6d:
64:2f:26:eb:f8:36:d2:87:fe:f7:05:9e:b5:b2:08:
e7:ff:98:27:8a:1b:1f:e8:99:84:fb:00:4d:63:27:
31:e7:e8:f6:3e:4e:50:99:3d:76:b0:19:1f:0b:6f:
f7:e5:e1:d4:3e:92:1d:71:24:af:02:63:40:b1:6f:
29:ce:31:52:48:01:d7:0b:04:8b:73:eb:5b:33:fb:
78:c0:61:3f:63:24:1a:11:d1:cd:aa:99:23:55:16:
ba:29:f9:c9:93:83:f1:e7:fd:9c:59:6c:55:3c:c3:
a1:b8:43:ab:fe:86:05:cf:ac:9e:a8:94:79:ae:eb:
0b:52:a3:cf:00:3e:1d:2c:5d:6f:dc:9f:35:33:80:
b3:e6:72:f4:fe:4a:23:83:86:95:65:58:d2:4d:32:
e1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.108.0/24
Signature Algorithm: sha256WithRSAEncryption
37:0b:14:d2:e2:d8:6c:26:65:85:9d:aa:8c:c6:f1:4c:76:6f:
34:e8:47:81:b0:c7:e9:36:72:73:10:3d:90:56:b3:c8:f1:32:
28:a8:33:d8:8a:02:37:91:9b:89:2d:c3:1f:71:a1:ad:8a:b2:
1b:f7:24:b0:f3:c7:53:4c:14:66:f1:1f:7d:6f:2b:39:54:f2:
6e:b9:ce:c8:b5:98:b0:e9:c0:75:1c:7e:a8:29:1f:a7:1b:cc:
60:7e:38:c3:52:4f:61:bc:2f:05:9a:71:fb:37:59:86:17:ad:
22:b4:82:74:f8:c0:ae:d8:ea:79:ac:27:6d:ac:24:df:99:5a:
1c:53:81:49:f2:b9:76:24:d6:33:4f:a8:51:fe:43:af:3e:f9:
6d:91:20:22:54:e3:50:de:10:fe:3d:1d:36:43:81:52:b9:19:
97:9f:87:7d:fa:22:0d:b1:21:7e:a3:1e:f7:ce:67:ef:23:ea:
76:82:fa:ee:80:90:c0:d6:3b:71:01:92:d3:ab:20:36:84:f2:
05:16:36:00:07:cd:1e:e5:2b:cb:c3:c2:da:e8:26:03:05:83:
36:ac:a9:53:e6:eb:54:ee:3e:44:9a:23:05:61:a3:63:fb:ee:
a5:46:0c:b4:7f:42:28:95:e7:95:fa:2a:3c:f6:8a:dc:e3:df:
e8:2c:07:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:54:20 2024 by rpki-client on console-fra.rpki-client.org