Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
File: PD9FAh1us0CkKy5d0fv3IaGmbWE.cer (raw, json)
Hash identifier: ++kWiml/nEWWcFx7Fa1VR35n2B5HJPUxzfUNvzniunQ=
Subject key identifier: 3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA99FDF56F8B9831047FE87C323132B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:35:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.212.91.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:fd:f5:6f:8b:98:31:04:7f:e8:7c:32:31:32:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:35:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:96:61:9c:ed:83:d7:7e:ee:7d:d5:71:33:e8:
da:bc:4e:60:5e:23:8d:7e:7e:ff:90:bb:6a:32:98:
2b:c6:60:54:fa:74:aa:c4:45:8a:cb:63:27:36:48:
f1:f0:c7:6d:52:20:c8:df:3d:ee:ef:59:78:18:ab:
77:1b:3d:ef:d8:dd:3d:44:0d:d6:f2:24:1a:f8:79:
4e:b3:a5:67:31:7b:9f:0a:bc:63:64:10:d9:77:53:
53:64:ea:97:52:fe:41:a0:12:60:b8:82:83:bd:9b:
c0:3d:ea:29:d7:1b:23:b4:f3:25:35:a8:c1:30:9b:
d5:94:0e:53:b1:22:48:4b:07:05:5a:47:ad:d2:9a:
b6:8e:b7:39:c3:5a:96:2e:2c:ec:6b:66:a7:9d:33:
26:01:97:b5:8d:74:69:f1:3b:22:93:b4:a8:60:d3:
cb:47:73:9b:85:3a:f0:62:cd:b9:f8:c9:40:5f:08:
5f:82:a1:0f:70:cc:84:e1:f5:ce:7a:d2:e0:83:3a:
c2:17:11:c5:83:18:62:aa:a0:86:ce:9e:77:27:65:
8e:83:f6:d5:48:09:f6:4f:ca:75:73:43:ec:8b:67:
5b:7a:09:fa:97:b6:19:e7:37:1e:51:a1:6d:32:87:
9e:a4:3d:2d:d6:4e:ee:bb:e6:a0:21:9c:a5:20:71:
7d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.91.0/24
Signature Algorithm: sha256WithRSAEncryption
19:93:64:5c:20:79:31:63:6e:9f:44:18:2e:70:65:30:b3:dd:
98:e9:c1:76:9b:f8:b0:f5:6d:61:31:eb:b2:ab:fb:2e:6a:ae:
e2:ef:93:42:37:80:fa:3e:7a:d0:36:02:87:33:40:6a:a8:c6:
f7:7a:06:d1:b3:60:85:2e:0f:82:d4:9c:ac:37:e8:fd:92:f5:
8d:84:dd:11:53:0e:31:ba:03:c6:28:ec:59:dc:c1:f0:4c:8d:
82:c3:54:11:1d:06:d7:e4:ad:10:d9:21:80:12:07:03:81:87:
16:ad:e1:46:3b:51:72:b3:38:16:86:b6:1f:60:c0:49:73:b8:
bc:b4:e7:20:d5:86:7b:3e:87:08:5c:e7:26:fb:2e:0c:e7:76:
50:fe:fc:bf:e8:ee:89:05:65:44:0e:12:fc:36:b0:cb:0c:29:
cf:6c:a8:8d:7b:80:b7:a6:ab:45:c9:b4:ba:b9:0b:63:60:b8:
98:fc:73:08:26:b6:30:8a:88:3f:43:6e:9f:67:ea:a1:d4:0a:
2f:ae:26:84:85:5d:cc:6f:6a:f7:7b:c2:83:35:6d:a9:7f:33:
5f:38:d3:2e:fb:f6:41:fe:92:0a:d2:6a:99:ab:89:5f:2d:47:
f1:6c:e7:83:9d:e9:a3:9c:1e:1e:94:3c:c1:1a:70:37:3b:3b:
de:20:dc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:28:18 2024 by rpki-client on console-ams.rpki-client.org