Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
File: N28vTtsjIwxkt5O0GVfvSjI-PFM.cer (raw, json)
Hash identifier: GmUARWDK8f+1EgPHyrvB+hGB1X09wFL7vdZ0CY6USe8=
Subject key identifier: 37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7260249C94C0C7326EB5FB61D275723
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.162.1.0/24
IP: 193.162.8.0 -- 193.162.12.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:02:49:c9:4c:0c:73:26:eb:5f:b6:1d:27:57:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=376f2f4edb23230c64b793b41957ef4a323e3c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ef:9d:75:fc:00:65:09:6a:e5:8c:f8:98:15:
99:b9:f2:ce:4d:2f:1c:72:9e:1e:47:d3:4f:97:47:
1f:f9:36:f4:aa:e0:7e:ee:f4:63:e1:66:8a:fa:c8:
ee:de:29:f9:da:1e:b7:98:50:23:9c:ce:53:32:6c:
1c:5a:ff:2e:ec:80:3a:8b:fd:85:60:bb:ef:72:68:
fc:3b:7e:9f:c1:1d:53:d6:ee:8e:04:a5:d4:25:7a:
e3:2c:28:24:fd:01:ad:b2:e5:f2:15:e6:e7:e4:db:
f1:8a:6b:fb:ac:82:1f:08:d6:2f:9a:d9:de:f2:7e:
fb:ea:d3:c0:4a:a9:05:1f:b2:69:71:aa:40:af:92:
41:3c:bb:68:26:59:42:8d:f3:80:12:11:80:30:87:
09:ee:61:91:18:6a:89:93:97:75:60:cb:0f:7b:4e:
26:31:0e:9f:ed:bd:be:f1:a3:c1:fd:9a:8e:7f:5d:
48:4a:8e:20:60:dc:d6:03:94:42:d6:b6:25:01:ea:
7d:e6:0d:70:fc:b5:c4:19:d3:89:5a:f0:6f:6b:0c:
fe:8b:ad:52:3b:ea:a5:c5:05:cf:58:0f:73:be:7a:
ff:a8:3b:7a:11:fd:dc:81:08:9d:01:05:47:34:d9:
5d:ca:a9:4b:11:78:63:55:d3:fa:e7:06:1e:f2:39:
94:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.1.0/24
193.162.8.0-193.162.12.255
Signature Algorithm: sha256WithRSAEncryption
a0:5b:95:0c:05:92:a8:c9:ed:b5:45:46:07:65:e2:11:32:69:
b0:ac:81:52:75:76:c1:36:bf:3c:85:d2:35:0d:3c:67:b7:bd:
ca:fe:c4:c6:fe:86:94:69:c5:36:6a:52:1d:3c:60:db:be:eb:
50:24:7a:17:67:11:e8:99:95:7d:65:9e:b5:4f:12:d7:7d:b1:
cf:8f:a7:5c:29:57:91:55:10:d9:45:4f:9d:c3:e2:00:16:a8:
d7:27:47:37:24:1f:ce:f1:71:a9:79:08:43:d3:b4:91:01:22:
6f:1f:8b:7f:73:ee:2a:81:dd:a3:83:79:98:fe:49:d8:4d:47:
72:95:dc:cf:fa:8b:b8:3f:c8:71:08:07:ef:03:42:25:bb:55:
f8:e8:be:32:8c:ac:c8:76:92:12:c1:46:f9:8d:d1:b7:76:77:
c4:0f:74:10:bf:f3:45:ac:5f:9b:5f:26:ab:3f:81:9b:72:54:
c6:0e:b1:67:4b:b6:d5:c4:07:0e:26:e0:32:a6:50:9f:91:28:
71:5a:3a:b2:ea:23:2c:64:dd:27:f0:a2:d6:5f:97:c2:0b:58:
48:4a:12:1e:bb:bf:17:b9:91:fe:ac:cf:65:57:57:a0:7b:c4:
2a:12:8b:ec:05:53:da:51:6e:aa:1e:34:8b:68:11:5a:ee:36:
bf:6c:8e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:30:37 2024 by rpki-client on console-fra.rpki-client.org