Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MRhnu6fuzPKwTBIquOws8ecvxeo.cer
File: MRhnu6fuzPKwTBIquOws8ecvxeo.cer (raw, json)
Hash identifier: V0UCf3MdocKepdgXOv8yQzg5hhPzOPHO0Bs3puI/BqA=
Subject key identifier: 31:18:67:BB:A7:EE:CC:F2:B0:4C:12:2A:B8:EC:2C:F1:E7:2F:C5:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E43ECA02C50C8BE5550A48456C404
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/MRhnu6fuzPKwTBIquOws8ecvxeo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 46.17.8.0/21
IP: 2a02:2870::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:43:ec:a0:2c:50:c8:be:55:50:a4:84:56:c4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=311867bba7eeccf2b04c122ab8ec2cf1e72fc5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2b:1a:92:b8:bf:c4:00:b3:08:19:98:6d:20:
d4:55:f3:ad:48:10:ba:ac:01:3f:9f:9c:27:75:53:
43:4e:e3:3f:38:5a:b2:2b:29:a5:91:6e:ff:ed:c0:
e0:ed:14:5e:db:21:17:55:a9:5f:6a:35:91:3c:e0:
3b:2f:29:0e:65:0c:9b:8c:43:2c:d7:fa:6a:18:66:
74:a0:11:a6:60:32:db:91:a2:f6:fe:ff:82:a6:f2:
af:7f:f9:bd:95:d8:44:6e:31:9d:46:0d:78:3f:41:
02:d4:74:ef:84:16:a9:08:56:a3:36:3d:90:6c:61:
77:62:61:f5:9f:ae:df:56:aa:b4:18:38:e3:c0:49:
82:dc:d5:a1:59:c4:8c:0b:35:ba:21:e2:f2:62:6d:
64:09:3b:55:1b:ed:e8:1a:af:13:08:91:4c:40:d9:
ee:9e:33:ac:02:49:93:83:57:2c:88:c8:be:5b:a4:
30:32:55:6e:20:72:ee:85:cb:b3:3b:a9:dd:dd:c8:
d6:8a:9b:2a:06:e6:7e:cc:67:8c:8a:50:09:43:b7:
3f:35:66:89:02:0f:1c:a0:2e:0a:f8:9e:91:c1:c2:
16:c7:f1:13:a0:ad:6d:09:2b:9d:be:df:dc:26:52:
58:2f:28:3c:a5:5a:dd:88:23:04:9e:fa:6e:a2:91:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:18:67:BB:A7:EE:CC:F2:B0:4C:12:2A:B8:EC:2C:F1:E7:2F:C5:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/MRhnu6fuzPKwTBIquOws8ecvxeo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.8.0/21
IPv6:
2a02:2870::/32
Signature Algorithm: sha256WithRSAEncryption
1a:66:46:95:fb:c6:95:b3:44:bf:c8:a1:17:30:3d:5a:15:1d:
9e:df:fb:54:1d:86:b4:65:8d:b3:3b:80:3e:01:23:07:29:8a:
45:51:ff:07:7e:ca:d6:13:61:b2:2c:07:05:1a:16:c1:68:3f:
ad:f2:62:3f:c5:be:55:99:1e:73:cf:8b:79:91:4c:aa:27:54:
72:75:84:94:ec:1c:5a:a8:99:31:aa:c2:a6:d7:80:6a:75:ae:
1a:2f:f3:af:8b:fb:e4:e1:88:65:68:56:a7:97:cd:de:84:84:
07:83:32:2c:5b:8d:28:8a:26:b0:f1:51:9e:40:fe:ad:26:92:
97:c3:ba:3e:37:6a:a7:a2:92:c1:de:ef:14:a7:10:13:80:02:
e2:c6:87:65:15:ca:8f:9a:df:be:e7:61:8a:0b:97:aa:95:fc:
e0:f8:10:95:fb:9c:a1:32:5c:ca:95:43:44:c8:ae:77:05:a3:
4f:1c:3c:b6:19:d7:26:c1:a6:35:f6:aa:94:c7:ab:6e:34:43:
ba:64:df:68:d9:a9:60:78:6f:57:12:22:18:74:40:4b:3d:50:
fc:9a:76:b0:4c:ac:df:9f:ab:10:3f:03:d7:ef:77:02:0d:f1:
9b:c0:32:07:2d:aa:92:e4:22:3b:87:25:76:7f:ca:86:e7:29:
d0:eb:37:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:42:03 2024 by rpki-client on console-ams.rpki-client.org