Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
File: RPMwC82ETWB1L-Xfst4pmWbpuPY.cer (raw, json)
Hash identifier: qRW6B55FP3+WkyHzWKEI8r0P1RBWTx2sL81z94vddh4=
Subject key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC727531797CC94A8CCB21E0E236331DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 157.247.0.0/16
IP: 192.102.17.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:53:17:97:cc:94:a8:cc:b2:1e:0e:23:63:31:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:cb:bb:b5:e3:1d:b5:4a:df:66:d5:2e:7e:
9e:8f:da:53:e9:0f:a4:ee:fa:d7:3b:7f:66:bd:2a:
71:6a:10:35:5d:0f:65:f3:81:f0:65:ad:7f:0f:73:
b9:e9:07:c6:c8:1f:8f:5d:2b:de:52:96:73:0f:c6:
cd:ac:af:ee:50:70:22:f5:35:cd:83:0d:ef:54:86:
5c:80:cb:cb:c6:eb:65:28:25:04:48:dd:e8:08:3b:
a2:ca:8c:13:62:7c:c9:b5:5d:48:4b:c9:82:f8:92:
aa:c6:27:f1:a7:04:d4:cc:a7:85:f1:4a:1b:3e:1d:
b4:c3:1f:35:bd:1e:44:ac:f4:e1:81:7c:e6:8a:c8:
01:90:9f:15:aa:86:7e:25:59:46:1e:11:b1:64:f0:
8d:5c:99:8a:44:a6:75:04:12:bb:bc:15:6b:8c:7d:
5a:60:43:bf:8e:6e:ce:12:3c:0d:e8:3d:65:00:ec:
99:e1:22:84:98:fa:06:6e:db:69:63:e3:79:36:32:
a7:d6:6b:b2:a9:5d:2d:66:b3:e0:9e:9d:d4:71:c2:
fc:f8:5c:94:91:0d:37:11:ae:b6:48:7d:61:9f:89:
63:29:1c:b0:99:bd:cf:2c:76:9d:92:37:29:c6:12:
3d:80:ec:b2:81:40:e4:a5:b2:7d:60:af:81:e8:d5:
fd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.247.0.0/16
192.102.17.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:8d:9f:2a:a3:d4:ca:e0:fa:b3:f9:6e:c2:0e:9c:9e:ab:9a:
eb:0c:3e:8a:42:bc:d1:97:89:b2:d5:b1:54:16:24:a6:6f:5c:
c2:7e:50:25:2c:aa:5e:6b:a0:c2:49:28:8f:0e:3a:fd:61:1d:
a0:dd:ea:3e:6c:e8:3b:2f:68:ad:da:9c:79:49:62:7f:d6:10:
b3:40:06:d2:e5:66:c1:8d:9f:fb:f9:2e:d9:2d:61:53:4f:13:
62:7b:3d:53:28:4d:eb:1a:10:a7:19:dc:fb:10:b5:73:7c:76:
da:00:aa:08:7f:db:c7:aa:3e:99:84:24:66:99:eb:88:d6:f4:
a4:e8:2b:90:07:18:ae:2e:24:88:03:1c:ab:7a:28:9d:1b:e8:
0b:13:b2:78:2f:2e:d9:eb:01:9c:e0:70:cc:37:f8:bb:6f:19:
c4:52:34:1a:9f:c7:40:24:75:36:14:a5:4c:4c:df:9d:92:2c:
d1:85:b2:e6:82:bb:4b:ff:2c:7b:cf:94:d0:b6:21:50:c5:fb:
87:6e:26:00:83:f0:8f:bc:f9:0c:76:d8:6e:39:eb:61:ca:ad:
e8:91:97:71:0a:b6:c8:3a:87:01:59:b7:44:9a:85:92:cc:8a:
f3:81:2e:2f:fa:fc:8f:14:03:5e:c3:d9:a4:a1:80:b9:a0:74:
db:22:f5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:34:29 2024 by rpki-client on console-fra.rpki-client.org