Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
File: Mu0BRXesc_-H7yDKb3V5XkyTf84.cer (raw, json)
Hash identifier: 7/JkghF53adG7DoBd8owVDjpABtUxhipk+15tfHsVqE=
Subject key identifier: 32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4255F373B64E7869A4BD5A7F8222833
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.90.64.0/22
IP: 2a0c:ab80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5f:37:3b:64:e7:86:9a:4b:d5:a7:f8:22:28:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:d1:d0:90:0f:91:d9:1c:9b:e8:5a:18:59:
ac:e7:97:4b:ff:77:67:ea:b6:6c:7d:c7:f2:d9:2e:
b4:0f:b0:af:f5:81:1d:a5:12:54:9a:71:c0:24:f8:
9a:a2:87:e7:a4:22:a2:41:09:3c:7b:9a:14:d2:a8:
ae:85:a1:56:6a:ae:d4:f6:9a:32:dd:c1:07:dd:61:
26:39:11:83:fe:4e:96:0f:39:86:47:3b:40:b9:23:
a5:e8:37:46:0a:61:76:10:32:93:27:37:8c:4f:27:
d3:9f:0f:fc:93:c7:08:21:26:c6:3a:71:d7:a5:29:
ed:b1:89:0a:14:81:38:dc:9c:cf:45:e6:c8:fb:25:
01:06:8f:bd:8b:59:4a:e3:39:2b:8f:77:af:36:5a:
1b:03:d0:e5:01:9e:c6:fd:c3:d2:c6:13:fc:80:d0:
ba:fc:be:52:c5:b8:10:df:c6:c0:4a:e3:37:0b:82:
46:79:ff:f5:00:c2:79:bf:90:c7:2d:29:72:dc:46:
34:c8:f3:1f:dc:fc:53:ad:e8:4a:22:0c:87:3f:0a:
24:e7:aa:f7:de:b2:ae:de:ea:de:90:40:64:f4:fa:
9a:61:d8:8d:3b:59:3c:e2:a6:fd:03:d1:50:34:76:
e6:2b:37:5b:82:2a:e8:3b:49:79:51:92:c8:76:6c:
15:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.64.0/22
IPv6:
2a0c:ab80::/32
Signature Algorithm: sha256WithRSAEncryption
3e:d8:81:ae:93:9c:ae:ba:df:b5:e2:29:39:93:61:5f:7c:68:
9f:28:74:ad:0c:d3:bd:db:f1:50:25:18:02:51:ad:6d:e5:78:
28:98:19:b0:a8:f9:01:e3:73:74:fc:50:cd:5a:e0:dd:48:3c:
ef:b9:85:df:f3:d4:dd:df:cf:35:70:51:67:37:d9:3d:bc:74:
a0:e4:67:a6:82:4e:14:6b:45:d8:7f:e3:6e:ad:9c:ec:6e:76:
7c:2b:18:be:eb:75:86:b5:d1:0b:08:3b:2b:a3:5f:c8:4a:55:
64:93:f7:7d:69:d5:ab:dd:0c:e9:c2:25:ad:00:0f:13:d0:72:
3a:6b:26:be:1e:60:2c:8d:ce:35:d6:09:6b:77:cd:81:8d:49:
73:80:2c:da:3c:ff:62:f7:59:00:51:29:1f:02:a0:c6:ce:84:
5c:7c:a3:06:9e:b0:38:89:11:59:00:84:c5:92:9d:f8:38:9b:
a4:2f:c3:54:7c:4f:d7:02:4f:01:b8:bd:c8:bb:44:b1:d6:e7:
af:7e:70:70:fb:24:9f:80:3f:67:e2:92:e2:d3:67:d7:18:3b:
cd:82:5a:a9:1b:a0:e8:70:ef:e2:28:e8:06:40:a9:86:fa:6d:
f7:13:3d:8c:c7:b6:0d:0d:6b:e7:48:ed:7e:a2:0b:d6:0d:7e:
85:f8:39:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:12:56 2024 by rpki-client on console-fra.rpki-client.org