Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
File: N6lZHUhfwNCQKom-hBijuxJ1BqU.cer (raw, json)
Hash identifier: upRGmBIBkP/D0qbEg+cwWU1LBCNiN5xZ7tFzktnE72s=
Subject key identifier: 37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CFE19E76161ADE7B692C3F662B4233EA9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 12 Jan 2024 14:35:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.169.105.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fe:19:e7:61:61:ad:e7:b6:92:c3:f6:62:b4:23:3e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 12 14:35:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37a9591d485fc0d0902a89be8418a3bb127506a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:75:e0:6e:90:b8:72:2e:60:92:89:e4:b4:ad:
fc:95:4a:db:08:c7:77:cb:7f:ef:d1:18:a6:b4:c7:
2f:9f:45:35:7d:4d:63:bd:de:77:cd:ff:dd:f5:40:
ef:19:50:78:9b:99:ec:09:14:ef:8b:27:31:13:02:
4c:d7:62:44:26:74:51:39:78:53:fd:6d:29:3d:68:
ac:db:54:45:2c:2d:9a:de:92:50:7a:aa:11:53:88:
c0:9e:0a:3c:a6:51:89:14:72:13:b3:96:49:aa:3b:
26:6e:e0:90:86:34:a1:0a:12:4b:8f:4c:36:6d:aa:
ff:e2:b4:e5:78:2e:a8:f8:ee:87:43:91:37:b4:25:
c9:4d:10:81:c0:e0:da:aa:f3:80:fe:96:5e:ca:ee:
56:b6:3d:11:32:e1:71:a5:34:5f:c6:82:bb:29:10:
ad:b3:ab:a9:3d:c6:81:75:b1:ce:94:a9:9b:df:36:
88:1d:ee:ac:25:61:0f:a3:56:1d:be:3e:3e:01:92:
b6:c4:38:22:10:f7:20:5c:fd:bf:9f:eb:53:76:b0:
d2:6d:f0:76:59:64:43:d9:00:a1:25:55:39:13:67:
99:c7:de:1a:81:e9:95:10:b1:da:59:86:49:59:de:
9a:a2:53:57:59:55:4c:38:36:4d:11:e9:47:6a:3f:
d8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.105.0/24
Signature Algorithm: sha256WithRSAEncryption
27:1b:09:44:5c:43:39:10:d1:9c:75:40:07:b7:85:b3:5a:45:
c2:d4:b6:6d:bd:23:2a:1e:6f:1c:0d:fc:2e:de:9a:07:0f:06:
dc:b1:e2:a6:2e:c1:41:fe:40:a3:17:a2:ab:15:b1:aa:ea:a9:
8f:23:11:90:0e:ee:04:8c:09:b2:92:1f:de:aa:f2:55:2f:5b:
23:d7:26:8d:94:34:c1:a4:39:e1:c4:53:81:d3:75:9b:03:b4:
a1:c4:3c:a6:63:cc:c8:df:f5:5b:d4:97:36:39:61:fc:b7:da:
22:e9:ff:2f:b3:05:99:bf:e8:df:3a:52:22:8e:56:62:0f:ff:
ca:a3:6b:77:db:c5:bb:17:66:d8:23:c2:5f:dc:ed:0d:18:f8:
2e:9e:01:c9:ac:2c:dd:e2:8c:10:49:8d:73:1e:c9:c3:bc:6f:
7c:ab:9f:a6:73:d8:0b:23:2a:c3:c1:aa:06:2f:e0:81:57:8c:
e3:6d:11:ac:c7:97:b3:64:dd:90:8c:a2:2d:24:8c:40:f0:2b:
eb:5e:ee:13:11:8a:a9:0f:f0:5b:7c:ba:a7:06:99:bb:d9:ba:
63:4c:81:a9:0f:53:76:9a:37:89:c8:dd:4a:40:c4:5e:2b:a3:
85:4d:06:ff:27:d9:1e:03:52:ba:26:39:63:a4:8d:c8:65:b3:
39:63:c5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:57:34 2024 by rpki-client on console-ams.rpki-client.org