Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SAlq0zvrPpUErVGk55A099GEdjM.cer
File: SAlq0zvrPpUErVGk55A099GEdjM.cer (raw, json)
Hash identifier: ZWEyn1dNR/SCHragasUW+TrrcBhNg/61Fkxn7QK0Qvw=
Subject key identifier: 48:09:6A:D3:3B:EB:3E:95:04:AD:51:A4:E7:90:34:F7:D1:84:76:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7FDD09B5903A2E15F20666D207048
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/8c143d-e2a3-4314-9a51-a0b9751efa47/1/SAlq0zvrPpUErVGk55A099GEdjM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/8c143d-e2a3-4314-9a51-a0b9751efa47/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2.59.124.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Dec 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:fd:d0:9b:59:03:a2:e1:5f:20:66:6d:20:70:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48096ad33beb3e9504ad51a4e79034f7d1847633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:54:69:77:53:73:96:c5:65:85:cb:15:4b:
7a:27:9d:92:03:31:cc:41:30:48:8f:5a:02:e9:33:
0f:81:bc:81:b3:b9:39:5c:6b:d2:20:21:52:dd:d6:
9e:9c:5c:d5:23:cb:83:db:5a:fd:71:16:af:2e:74:
ce:05:a2:eb:af:0f:33:62:91:c9:f3:62:68:d0:1d:
63:64:fb:fe:bf:5b:91:23:79:ac:87:bc:5e:05:c8:
9b:4b:b8:6c:51:36:95:13:91:87:6f:66:91:24:27:
22:4f:86:86:2d:1d:ef:bb:e9:45:78:55:8c:4f:1c:
94:48:ce:e3:47:b9:84:7c:3b:ea:88:07:02:f8:b0:
6e:77:43:80:03:39:23:b6:e2:e6:57:91:16:6c:7e:
7b:20:7b:75:57:3b:7d:e9:a3:7a:c5:c5:4b:e4:47:
21:42:4a:81:d9:34:55:42:76:a4:2e:9d:f3:cb:02:
46:36:e1:43:5d:d3:26:9c:ce:d8:34:d8:3f:b8:c9:
bf:df:c7:f2:cc:7a:80:2b:bc:ea:fd:dc:d7:51:ff:
2a:b1:b1:cb:46:f9:3d:a3:e7:4d:98:fd:8a:26:f0:
23:bd:cf:95:43:b2:98:c3:16:90:5d:a2:07:9a:74:
a3:19:45:20:d1:90:1e:ad:92:a6:45:e3:01:ff:14:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:09:6A:D3:3B:EB:3E:95:04:AD:51:A4:E7:90:34:F7:D1:84:76:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/8c143d-e2a3-4314-9a51-a0b9751efa47/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/8c143d-e2a3-4314-9a51-a0b9751efa47/1/SAlq0zvrPpUErVGk55A099GEdjM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.124.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:0a:69:93:ee:7d:e1:67:bf:81:09:f2:83:11:90:8d:b3:6d:
65:e1:ca:56:f2:db:55:2c:84:31:5f:31:f8:a0:41:28:6d:a6:
25:95:21:e1:6f:3e:9e:2f:15:e3:eb:d5:51:44:59:d9:64:76:
17:c0:d7:32:8a:d1:8e:77:d1:4f:15:8c:5b:02:85:76:d1:15:
a0:9a:64:07:e2:a9:10:fb:3b:0e:a6:44:60:83:fb:fe:d1:1c:
b6:e1:b2:4f:bb:1b:d4:c1:17:a6:d3:72:bd:9c:34:fe:c9:0e:
38:84:43:98:b4:db:bb:7a:05:16:5b:70:ca:08:3f:5a:09:a6:
90:87:f2:7e:c8:21:11:1a:06:b2:0f:67:10:56:c9:d9:fa:1c:
40:59:80:54:ca:bf:5d:3f:a3:6a:6a:81:bb:ea:f7:3e:cd:f9:
08:83:5a:dc:fb:db:9d:4e:04:01:69:f3:5a:c1:c6:a4:11:81:
33:e3:2c:d1:5f:35:95:90:6a:31:9b:ea:e2:92:67:cd:dc:58:
41:5e:04:6d:6b:c6:2f:68:4f:b0:2b:68:eb:86:c2:e0:a7:b9:
7b:e4:5b:48:0b:21:93:02:33:5a:29:d6:7e:c5:12:60:ce:b6:
38:7f:f8:6b:75:19:39:40:81:26:4a:7e:16:82:85:e9:6d:62:
f8:6f:5d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 4 08:55:50 2024 by rpki-client on console-fra.rpki-client.org