Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
File: RmSgU4XAYmgVApGX6xUGSF09bRw.cer (raw, json)
Hash identifier: n00tj5pbEWYBW6B6dEkJ94aOwXx+NWHpKafyn6zBPoc=
Subject key identifier: 46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94C122B41FD8042BA0227EC63C23043
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:30:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.234.214.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:12:2b:41:fd:80:42:ba:02:27:ec:63:c2:30:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4664a05385c0626815029197eb1506485d3d6d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:d0:6f:bd:76:16:77:5c:f6:0a:cd:64:cd:
fa:fa:95:c8:36:b5:e1:9d:d3:ce:74:72:ca:34:a1:
07:6a:83:86:bd:3d:a6:79:2b:88:33:be:82:6b:95:
9a:6f:39:9d:a1:0c:06:8b:dd:40:2f:c5:78:08:b9:
70:b8:03:38:db:fe:35:3a:ac:4c:a9:e1:e7:3f:ca:
3a:97:70:0c:78:c8:a7:2c:8e:cf:a5:0b:db:78:47:
84:cc:f5:d2:3c:10:76:df:99:7d:b6:1f:a6:55:be:
e4:f6:ec:ad:df:88:e6:3d:d4:31:6d:0b:5d:96:2e:
68:7b:22:c9:3b:53:c9:2d:45:ad:11:55:9e:84:98:
88:43:80:0d:26:84:b3:4b:aa:43:76:64:ea:e2:a5:
a3:bc:57:59:57:25:b8:33:b5:ee:df:1c:2f:79:15:
46:9b:c3:e5:9a:9a:c6:cf:e0:60:1a:74:07:db:f5:
08:ed:83:62:68:ff:96:bc:9d:93:88:28:95:72:77:
5d:77:e7:d0:a0:59:e9:b0:bf:cc:8b:9b:30:a7:31:
12:f9:53:7a:f4:11:00:dd:08:81:41:92:44:1c:61:
93:0e:4d:a4:48:43:d5:6d:1e:2a:e5:f7:86:9a:70:
81:fe:52:d1:db:82:cb:71:77:4d:92:05:d3:7b:13:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.214.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:a9:b5:ea:25:ca:42:31:6c:3b:ef:a7:d3:cc:39:9e:65:4f:
75:3f:8f:8e:5b:a8:0e:57:35:26:8d:e2:23:37:e3:27:4f:64:
7f:29:bf:d6:e9:64:23:b2:89:08:6a:98:34:70:a4:cd:3a:14:
c6:65:f6:de:81:18:d4:79:1d:32:49:0f:7d:fd:38:eb:3d:46:
a3:fd:d8:ee:b3:08:3e:db:cb:3a:a8:c8:57:6b:06:cb:dc:08:
ef:a8:9a:4e:27:ca:e1:ae:56:8a:7b:a9:11:cc:88:2d:7c:a7:
c1:ab:05:86:59:2a:aa:85:33:a7:b8:b7:96:82:52:9a:a4:40:
85:b7:80:2d:52:5a:46:a6:40:2f:3f:91:e5:d8:a9:d2:5a:8a:
a8:1b:bf:ab:a3:12:13:16:50:69:23:87:77:21:9d:e4:39:b6:
47:91:f6:dd:10:ab:30:d0:54:59:c7:8e:74:a6:54:f1:3e:c8:
1f:2a:5d:aa:c2:87:73:62:85:ea:26:4a:8c:64:a3:8f:ff:6a:
4f:a3:fe:36:28:c8:e2:1d:c0:e8:08:ff:32:5e:c6:f3:cb:bb:
6b:4d:20:fb:b2:9e:c1:18:68:df:1d:be:8c:40:26:de:1b:c9:
0a:5d:54:78:4d:10:94:d6:1a:3d:39:31:72:dc:d8:6e:94:48:
a5:7c:1d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:34:47 2024 by rpki-client on console-fra.rpki-client.org