Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
File: RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer (raw, json)
Hash identifier: 6R+CirBq8Qw3P1QxF7/E2FvehOtCKIZe6+E8ta0BOWo=
Subject key identifier: 45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EC73B6E0F943B4DC2F6D3D3D4AF2F250E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Apr 2024 08:59:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2.57.100.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c7:3b:6e:0f:94:3b:4d:c2:f6:d3:d3:d4:af:2f:25:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 10 08:59:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45d58323e7d4f91c37297cd1926566033b3f8aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:54:34:6b:a9:41:3e:69:46:27:31:73:3b:
fa:7a:5b:38:fb:97:11:16:12:05:af:4e:2d:1a:d3:
13:80:f4:46:c2:49:57:c2:1d:32:14:89:cf:1c:bc:
fd:ae:c5:90:67:31:1b:30:3b:fa:74:a1:e7:59:62:
c4:6c:7a:30:ac:19:1c:4b:9c:fc:00:d7:f1:17:3f:
18:90:05:21:9a:90:1f:16:28:d0:a1:c1:7f:7f:70:
14:14:45:c0:6b:2f:5d:f3:aa:74:16:c5:be:65:d6:
03:d3:e0:c8:fd:2e:90:8a:04:f1:3b:79:96:11:7b:
0a:62:fa:7a:49:80:82:a9:e6:0b:00:64:4b:20:5a:
06:67:04:40:61:22:78:79:78:a6:61:a6:0b:20:c0:
5a:0c:e7:c0:59:e6:fb:db:ef:67:f1:40:70:0d:19:
e5:15:23:61:09:41:e6:80:40:a7:62:92:d5:db:9c:
99:d6:6e:9e:25:a0:85:e4:67:b4:4a:4a:94:cc:a9:
80:72:a2:4d:e6:96:44:87:57:ef:22:5e:1d:cb:20:
d3:1f:dd:ce:f3:d4:9d:c3:ba:92:d2:8d:00:83:b9:
de:c9:3d:aa:1c:66:e1:7e:e1:43:8a:ec:63:69:73:
db:29:c0:61:6b:d7:5d:64:35:73:a4:0d:ee:12:37:
97:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.100.0/22
Signature Algorithm: sha256WithRSAEncryption
42:2f:01:db:92:0e:5a:e1:b4:f0:b4:6d:dc:b9:80:15:eb:e7:
fd:c8:50:cb:d0:d8:04:f1:9b:b8:d6:ee:c7:4a:b7:f1:05:43:
42:21:13:45:6f:67:6c:a3:95:91:cc:c6:8a:33:57:41:a3:5d:
d0:79:0c:ca:be:5e:ac:5f:2c:8b:0a:23:fd:7b:f4:81:c4:41:
42:1e:0a:52:7f:19:99:ef:c9:9e:4a:ec:d2:4b:68:f7:f2:71:
3b:e4:5e:67:bc:95:08:21:d2:0f:4f:e3:87:c8:2f:80:b4:94:
ff:1c:fd:71:8c:8c:fb:ad:d7:dd:16:1c:d5:2d:0f:96:93:cf:
78:66:18:8c:85:5a:49:4f:dc:16:24:1c:ac:f9:e8:53:d0:d3:
0f:46:dc:ee:7a:12:f6:f1:26:dc:cd:32:0a:d2:a3:c1:ce:f9:
85:5a:ce:74:10:95:77:48:6e:66:4e:05:ec:35:f7:07:8d:de:
ec:18:48:4f:b1:cf:65:4e:3e:4e:35:2f:92:1d:7c:dd:50:8b:
e1:bf:63:d7:a3:91:88:01:36:ab:da:72:f6:9a:84:ae:ce:61:
44:e3:b4:48:d2:b3:dc:3f:c5:4e:18:86:6f:64:60:58:0c:63:
eb:43:22:53:7d:fb:41:e5:af:ff:a8:7d:b8:81:a0:97:66:e0:
c2:d0:c3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:14:58 2024 by rpki-client on console-fra.rpki-client.org