Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
File: MN0LcIUOH5iVZY7avii52NnqAXw.cer (raw, json)
Hash identifier: X0lzyuvU2CIrDvVskHOlDKksKH3uy6eNpwSfWt2xlh0=
Subject key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E0CBB6310CE9B726C0DC3BF2825D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 141.37.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0c:bb:63:10:ce:9b:72:6c:0d:c3:bf:28:25:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:05:aa:66:b8:cc:d9:4d:5c:0d:c7:0a:d1:
f5:b8:d9:65:f9:8b:1f:54:3f:c2:7f:f3:71:a3:86:
f3:44:5b:4a:7d:75:dd:c7:4c:75:56:22:59:63:97:
6c:ee:54:13:52:74:70:48:87:66:69:47:83:46:22:
02:a2:7f:a8:33:0a:2e:10:6b:1e:1e:bd:ab:0d:ef:
8d:d6:5d:7a:61:6f:f9:75:4c:2b:16:31:79:93:ec:
da:af:a1:c8:fe:e0:f4:58:ff:3a:84:88:c5:c0:e7:
7c:fb:ac:45:92:1d:62:f3:f1:d4:7f:bf:a8:89:f1:
2b:3b:3e:86:f4:74:19:9a:f6:52:7f:3c:b7:02:18:
e5:de:aa:f7:5b:a3:33:2f:2a:17:2d:6b:18:69:04:
21:3f:1b:a8:eb:4e:a4:bb:28:66:5d:0b:38:46:cd:
b5:cf:d8:d3:14:21:e6:48:17:b4:89:d9:b8:eb:20:
01:47:5d:83:13:ab:1b:9d:b4:81:76:d6:87:f7:6f:
a3:58:e4:1d:2b:31:4a:ad:43:ad:d2:53:90:d6:3d:
31:21:7d:31:36:9b:1a:59:18:eb:30:89:b1:3c:14:
51:3a:40:63:89:82:dc:57:ad:b9:20:56:88:7d:3f:
a9:9f:84:a8:de:03:32:88:59:b5:08:b8:a2:74:f7:
27:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.37.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a8:82:3b:ee:e7:50:3b:6d:72:7f:46:f6:dd:03:c4:77:93:cd:
4f:3a:02:11:de:5e:4e:87:25:5b:82:55:fa:54:da:4a:4c:87:
b8:db:d1:41:d2:ba:bd:2a:b6:86:96:2b:64:28:c9:a7:27:2a:
0a:89:b8:d2:a3:aa:0a:cd:a1:2b:6d:cf:90:24:cb:ab:8a:8e:
bf:b9:3d:83:4b:55:18:87:17:6d:1f:8f:84:4a:d2:00:dc:59:
7f:08:fb:68:24:be:f9:aa:3c:c6:0c:14:2c:10:28:0e:c1:34:
43:3b:bb:fc:92:04:7f:04:1e:e6:8d:84:05:4d:05:50:51:70:
56:5f:71:12:86:ec:5d:ff:a4:90:3f:bc:cf:2f:ba:02:83:14:
cb:4d:03:1b:c2:0c:49:f2:5c:80:2f:ab:08:65:6c:b5:01:c0:
1a:23:84:58:77:c8:a7:8b:7a:8a:53:e3:b9:68:22:33:56:15:
d0:b0:7d:f9:84:11:d0:b8:8f:be:57:f6:4f:8a:14:05:ce:bc:
a1:d6:ed:a2:a9:7f:59:9c:6f:8b:c6:de:3a:3c:7d:3e:58:e5:
81:10:8d:88:a3:5d:42:89:12:dd:e7:3b:fd:a7:23:41:17:f4:
41:3f:48:41:79:33:90:23:58:90:ca:9a:b1:72:af:9f:12:2e:
97:2f:1b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:04:09 2024 by rpki-client on console-ams.rpki-client.org