Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
File: RsmLLko-Bg3vRavGLA40X6qAtew.cer (raw, json)
Hash identifier: 9NBqlgJlW3pWbLDblAx55FtT6XUVjFTSW15w5RzcWDk=
Subject key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F14CBC8BC76692D82AD9DBC4CD69A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.61.136.0/22
IP: 2a02:7a60::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:14:cb:c8:bc:76:69:2d:82:ad:9d:bc:4c:d6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:9d:72:04:7f:f4:5c:1e:56:22:40:98:51:
49:77:c1:d5:db:d6:ae:8d:c8:db:05:17:79:e2:ab:
a4:9d:1f:65:e0:f8:cc:a8:82:79:cf:d0:cb:16:03:
34:38:84:49:43:22:87:98:ac:68:d8:c6:83:1e:6a:
c0:e6:6c:9e:01:da:ac:2f:90:53:59:5e:14:ac:a8:
20:56:57:4b:ef:b8:ec:6a:5d:61:33:6c:f6:b6:38:
4b:f8:00:cf:24:30:67:42:35:e4:64:35:ce:09:ad:
53:01:cd:3b:8d:f1:83:46:1d:f1:fc:8d:58:fb:90:
08:da:ba:c9:db:7f:78:82:94:32:42:0f:09:46:73:
88:03:c4:da:63:df:41:82:fe:f0:97:c9:0e:f7:43:
29:ca:c5:45:fb:ee:c6:6c:8b:d1:42:b1:d1:f9:6e:
ba:0b:31:84:20:f1:38:7b:62:72:dd:83:46:75:ac:
c7:40:31:06:69:3e:46:61:ca:65:f4:a0:ed:ff:9d:
42:c2:41:71:6a:5c:16:6f:cf:12:93:bb:b3:bc:86:
39:e7:91:28:ed:ba:ab:52:6a:f9:8e:13:87:de:bb:
16:a1:cb:d0:c2:be:34:15:25:85:e8:3a:19:7b:ed:
a5:30:1c:64:43:94:4e:12:c2:a6:dd:65:52:38:76:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.136.0/22
IPv6:
2a02:7a60::/32
Signature Algorithm: sha256WithRSAEncryption
06:81:42:0e:01:0c:a6:0d:20:c9:b5:6b:0b:83:52:65:bf:ed:
c0:58:af:db:14:91:7a:f6:b6:72:a5:db:a1:ce:99:c4:b2:84:
ad:5c:d0:6a:09:92:06:41:e6:9c:9e:82:ea:4a:51:d2:f0:3f:
5d:fb:b0:85:8c:b2:f2:e8:7c:5c:5b:21:a7:30:2e:44:c3:d2:
41:8e:5b:c9:97:ed:2a:2b:7f:6d:2f:31:2b:45:86:28:07:19:
22:6e:05:01:89:3c:6b:77:1e:c3:fc:89:63:37:8b:f1:9d:ba:
ff:e8:20:5a:e6:00:d1:1b:99:65:5d:cd:2a:cb:01:06:25:af:
51:79:b7:49:9e:57:02:29:22:23:51:97:aa:26:b6:50:5c:7f:
5a:00:05:df:42:86:19:b8:f9:8c:31:7a:4f:08:9d:bc:a2:a2:
af:ba:21:fc:1f:0e:f5:49:9f:79:52:67:40:95:8a:84:84:e0:
b2:32:ac:69:4d:2b:cf:e3:6a:2c:fb:39:83:6a:8d:3a:c8:b4:
7b:00:7d:60:8d:b9:11:84:13:18:2f:06:f8:89:9c:a2:22:21:
3c:19:23:bd:6a:97:29:8e:b2:51:f6:c0:df:d9:7c:fc:77:46:
b0:9c:9e:ce:9c:7c:c8:9f:5f:18:98:40:8c:76:5b:18:78:3b:
42:fe:75:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:44:04 2024 by rpki-client on console-ams.rpki-client.org