Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.cer (raw, json)
Hash identifier: LwNnml+pqbrC/sjvmkMWs6bqI6ooiliNGnTEwtbVLdY=
Subject key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBFFEE5FEB9C18E1712A18AA6B1386
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.50.120.0/22
IP: 2a01:a7a0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:ff:ee:5f:eb:9c:18:e1:71:2a:18:aa:6b:13:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3c:c0:90:9e:30:15:a7:6a:ec:c0:1f:51:2c:
a0:b9:2d:b3:80:4e:7d:1f:e0:7f:94:71:94:56:86:
d3:16:09:1c:02:39:e4:2d:34:2d:73:6d:46:28:98:
78:f2:d5:fe:6e:21:55:31:4d:7e:21:60:bc:25:7e:
30:dd:a5:f4:d6:2f:bd:31:26:3e:d2:a2:13:27:e9:
58:fb:fe:be:fc:11:f9:73:44:89:84:b2:a0:88:fa:
13:49:da:e9:5c:f0:51:d1:63:0c:f3:d6:d2:96:d4:
b8:c4:3e:95:04:66:eb:67:a7:8f:57:c5:da:47:0d:
30:4e:4d:c0:c2:41:11:b2:e8:13:34:ce:24:88:a7:
12:48:4d:b2:6a:f0:8d:36:03:50:56:ff:4e:d4:92:
b9:58:da:c4:74:f4:d2:35:e2:1f:f2:ae:fa:92:cc:
4c:e1:ab:4f:c6:58:ba:53:66:14:3c:34:a2:f9:9c:
33:a3:6f:f7:eb:dc:18:2e:42:8b:4d:bd:98:57:e4:
05:d7:c8:07:15:7e:63:cc:2f:7e:65:86:f3:74:82:
dd:29:34:bd:11:6f:1b:80:e0:9f:36:c2:79:ac:f2:
51:52:67:76:33:15:5d:ba:bf:18:9e:a6:34:b7:dc:
8e:e5:e0:94:c2:78:d6:f1:3e:ff:8b:ef:0d:9c:9c:
1b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.120.0/22
IPv6:
2a01:a7a0::/32
Signature Algorithm: sha256WithRSAEncryption
79:ac:92:92:72:61:64:10:f6:53:a8:1d:c5:5e:9b:63:ea:4c:
53:b2:b2:03:40:dc:30:b0:d6:19:60:03:68:74:82:38:a0:fb:
e3:29:b3:c3:a1:3c:a6:97:07:76:95:75:80:d2:73:3d:37:c5:
8e:cc:34:b6:35:a5:05:2e:3b:ec:15:6e:f3:22:26:fe:22:37:
d4:93:c3:86:f5:9a:92:ec:50:80:8a:b8:6c:10:e5:4d:e2:2c:
0c:f2:5f:c3:c3:1d:af:72:2e:26:ad:2c:4c:de:10:91:9c:a5:
f0:8f:45:d2:88:f6:d4:b8:89:ea:c1:d2:14:1d:c5:6a:12:f4:
3b:17:7e:72:d4:8d:11:c1:df:09:44:17:95:80:92:ab:6a:6f:
b1:7b:d3:c4:bc:a7:5c:67:df:b5:29:84:1a:f1:55:e0:16:ab:
ad:f1:49:39:cb:91:6c:31:31:30:dd:0f:41:63:c1:e0:17:50:
86:73:00:84:d4:8b:4c:34:e3:b6:1b:f2:40:01:4c:42:78:a3:
a1:db:bd:e9:1e:3b:b9:5a:e7:bc:82:ca:7e:be:00:52:63:52:
06:75:cf:ec:6e:d3:a3:2c:38:d0:60:f9:c6:61:4a:85:d1:aa:
18:f6:d3:87:78:a0:cd:f7:48:33:dc:39:f8:fb:c2:b6:b4:36:
8d:cb:78:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:43:49 2024 by rpki-client on console-ams.rpki-client.org