Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
File: RRblOzLKp2GQbw_N6idbcg4XQsg.cer (raw, json)
Hash identifier: 3Wk77iokfo1yUKjf2JeY6eWxxoLkU9XQHEd/r43LRi4=
Subject key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6C3550C3F7C20872BCA9108659044
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.177.176.0/22
IP: 2001:67c:1200::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:c3:55:0c:3f:7c:20:87:2b:ca:91:08:65:90:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:42:d8:d4:77:24:4d:db:4c:69:b3:c4:0f:
02:92:e8:ff:61:d5:7e:ce:12:29:e8:34:08:e5:52:
10:c0:79:b2:16:03:8a:34:64:e8:43:7f:d8:a1:ab:
b7:55:1b:52:ba:f5:90:36:f8:5b:af:9e:75:27:c1:
4c:a0:d8:64:11:de:d4:58:3e:88:07:c9:a0:f4:7a:
1e:22:b5:67:ee:cf:92:40:22:2f:87:e9:a0:3b:70:
fb:a2:09:72:c8:88:b6:81:2b:43:30:42:5f:d6:f4:
69:d1:5e:7f:24:b1:22:ce:54:c3:bf:39:e7:b2:7b:
b6:1f:a6:f4:75:e9:e7:c0:e4:93:c4:59:9f:de:9b:
58:1c:b8:49:6b:c5:ea:44:18:4e:68:c1:b9:0e:ae:
0e:e7:e5:9d:6d:ee:66:aa:f0:bb:ad:27:1b:86:41:
11:61:78:f2:6e:86:ea:f8:ee:80:b1:1d:6b:61:cd:
47:37:f3:6b:a3:0a:9e:2b:d8:64:2a:c0:3b:f6:43:
57:fb:f3:c9:f4:ea:8c:5c:a7:11:70:e1:fd:2e:23:
40:a6:7c:0a:d2:34:3e:87:e5:7c:a3:44:b6:78:93:
f7:b7:18:00:03:ee:7c:5d:64:ec:bd:48:96:2b:fb:
b6:98:ec:a6:f0:fa:87:3b:6a:79:ca:22:81:13:8e:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.176.0/22
IPv6:
2001:67c:1200::/48
Signature Algorithm: sha256WithRSAEncryption
27:f2:a4:ce:cb:07:77:e6:af:c9:23:b3:b5:ab:bc:23:4c:d6:
07:c2:02:f2:15:f3:92:fe:6b:b4:58:9b:0f:32:b1:d1:64:63:
16:56:a6:cd:d5:de:d3:6f:c6:7a:03:df:67:28:72:af:ef:ea:
5f:b9:d5:f3:b5:21:a5:6d:eb:08:9a:46:f4:74:a3:8f:09:82:
9f:54:09:12:00:de:b1:3b:d9:42:c5:d6:cc:2e:c4:b0:ae:20:
14:c9:5d:e6:85:19:d4:98:aa:2a:c2:52:1b:3a:51:a2:8e:44:
6d:45:13:d2:32:ae:6d:54:9f:5a:d6:74:2c:94:55:c8:eb:c1:
66:48:00:f6:82:b2:1d:0d:14:94:1c:3b:30:7c:6a:6b:09:f5:
7d:ee:e3:0f:76:88:9c:f3:b1:81:4f:5f:85:cf:28:c8:b6:07:
e0:b9:13:b2:ff:d5:3d:fc:74:2f:ee:18:e3:6e:34:f1:3a:d8:
ba:8c:69:b3:0c:36:59:42:c5:19:cd:d6:30:e0:75:4b:d5:3e:
98:41:a2:ea:7f:27:42:aa:39:cb:18:ae:e3:75:65:61:d0:df:
1a:54:fc:6c:f5:8d:5a:fd:85:ce:46:98:ac:bb:27:26:23:70:
8c:d4:9d:2d:00:fd:e3:10:d7:9c:99:0e:1c:eb:c8:66:29:57:
41:4a:76:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:58:56 2024 by rpki-client on console-fra.rpki-client.org