Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
File: P1YjHn71MYG2MCYPVzmpOZgLzg8.cer (raw, json)
Hash identifier: z54ihVIDGBR7okZ3GZaiRAghRMzg3iPwoZu7enMvZS0=
Subject key identifier: 3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCAE5498FA1B5F4A71387D168B9A5C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.106.191.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ae:54:98:fa:1b:5f:4a:71:38:7d:16:8b:9a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f56231e7ef53181b630260f5739a939980bce0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:94:08:4f:4a:48:b2:29:8b:f9:67:f1:d1:
d1:27:9f:1b:65:e5:f2:4b:98:c6:7c:ef:97:fc:ed:
5c:c4:50:0e:08:0c:99:dd:2f:8f:66:e7:75:ae:f7:
a5:82:95:ec:7e:77:f7:ca:1e:04:a0:ab:c5:10:98:
9c:4b:2d:da:42:ed:82:ce:45:57:c9:cd:07:07:09:
3e:8f:19:3e:17:5f:6b:48:15:a0:db:dd:8e:0c:2d:
71:71:d7:85:e1:04:4f:96:b5:e6:b4:eb:6e:56:65:
e6:4a:ea:3f:40:5d:48:97:99:a2:57:24:d5:63:8a:
53:ab:2a:fd:88:d4:a4:dd:ba:e8:8f:a7:ff:28:bb:
d9:f7:cb:24:87:13:39:48:c8:65:59:4a:b0:76:4a:
a6:b6:9b:ef:6d:bc:9f:f6:32:e9:b5:d0:2b:f6:87:
f6:b6:2f:35:ff:53:c9:30:2a:b7:ff:7e:35:16:6c:
b3:8a:a3:4a:a6:d7:ee:78:94:ef:12:37:23:6e:39:
7b:df:9b:ad:c1:e7:54:4e:af:9e:0c:7f:21:55:fa:
4d:1d:da:72:64:d2:b4:82:e3:f9:3e:7c:07:14:e4:
27:0b:fc:ae:a6:8e:1f:58:5d:0d:49:24:b4:6d:6a:
01:94:33:79:0b:0b:56:d0:a3:79:3d:fa:29:f0:a6:
d7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.191.0/24
Signature Algorithm: sha256WithRSAEncryption
43:22:e0:99:b0:9b:e2:48:ce:30:31:2f:40:f6:30:88:f8:2c:
01:64:fb:81:90:81:4c:63:17:b3:7a:b6:28:18:bb:9e:88:10:
5c:cd:94:57:c2:72:0f:2b:ad:f3:7f:3c:45:ac:60:50:e6:40:
ed:32:b5:14:3a:fe:1b:17:e6:44:aa:f0:97:30:cc:fb:e3:f5:
67:eb:a3:b7:c5:84:04:eb:09:1a:7d:4a:dd:b0:32:53:0c:fe:
cd:b5:47:a2:56:bf:13:8c:bc:26:d3:0e:64:fc:71:49:28:10:
3a:a1:78:f6:f4:b3:2f:11:f4:44:72:8e:21:a9:9a:8b:48:66:
b4:ba:c1:e6:a1:71:31:5d:04:ab:c6:99:2b:5e:43:97:87:84:
42:39:dc:8f:ea:c8:59:df:85:ca:5c:03:bb:e9:9b:cc:38:70:
15:fb:ac:14:3b:af:a1:82:52:2d:98:01:4b:99:ab:11:06:a1:
ca:e0:01:35:1d:b4:dd:01:54:6c:d0:6b:f7:21:1b:43:eb:09:
50:a5:2f:0a:f0:62:6e:16:11:8b:53:72:5b:b3:99:30:2b:a7:
35:66:bd:bb:2d:a8:a0:28:33:8b:2f:1d:e9:89:f3:c2:9a:e3:
33:13:68:85:6d:41:7c:3d:c1:f2:8c:17:f8:3b:76:59:97:b5:
94:c0:19:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:05:41 2024 by rpki-client on console-ams.rpki-client.org