Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
File: SFNVcGg2xtB8f9JdW1nbC22JT7U.cer (raw, json)
Hash identifier: JouMMGEzIoxEmwDk8G+KFYjpc04pZC06PEN6r5a5rjQ=
Subject key identifier: 48:53:55:70:68:36:C6:D0:7C:7F:D2:5D:5B:59:DB:0B:6D:89:4F:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801F8C9CAD254808D659DB4CFFA2698
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.228.10.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:f8:c9:ca:d2:54:80:8d:65:9d:b4:cf:fa:26:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=485355706836c6d07c7fd25d5b59db0b6d894fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:35:9f:03:3d:22:5e:bf:0e:08:54:13:dd:61:
61:88:46:d5:4d:af:68:09:dc:7e:da:f4:04:4f:b8:
1b:5d:ea:a2:7b:ab:a0:e2:be:2c:a9:3e:9c:91:57:
f8:bd:14:41:05:3f:ab:21:bb:65:e1:1d:4c:58:d7:
10:1f:4f:bd:4a:f5:94:5d:74:16:6b:9e:66:7f:75:
0c:32:3f:8d:7a:6a:d2:60:2e:87:73:e6:78:3a:62:
31:1f:b9:f4:ab:d1:e1:6d:1e:41:50:1b:39:8d:d7:
06:3b:8d:5f:e0:c3:09:9b:a5:f3:96:45:be:5d:9e:
81:2c:a5:14:1c:fb:e3:d3:c0:7b:04:b7:14:ac:33:
0e:f4:7c:d4:dd:3c:78:e0:0e:99:08:a2:48:24:15:
3b:80:fe:8f:b4:36:4b:29:0d:b4:2e:f0:3d:bb:87:
fc:ed:98:f8:58:3d:be:94:5f:b9:92:ed:ee:30:11:
c8:8e:b0:74:f4:25:6c:8f:72:4f:b8:eb:bf:23:de:
10:9d:95:29:c0:2f:bd:ae:6c:69:ca:8c:5f:61:c7:
0b:bf:73:36:be:c9:c8:df:4f:a1:16:34:a2:aa:d7:
2b:84:8c:09:22:2c:e2:98:4e:78:97:45:c0:3a:16:
5f:4b:8a:37:40:11:61:46:28:08:57:a8:f0:50:c9:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:53:55:70:68:36:C6:D0:7C:7F:D2:5D:5B:59:DB:0B:6D:89:4F:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.10.0/24
Signature Algorithm: sha256WithRSAEncryption
61:3a:09:79:ac:e7:8f:26:75:37:79:1b:ad:46:d9:c3:06:25:
0d:72:c6:e7:76:5b:77:2f:d6:93:05:c5:fc:16:1e:b2:1b:93:
61:2a:e3:64:42:5b:00:f6:b7:ef:0b:33:19:71:af:69:a1:3a:
8f:01:9c:75:16:c3:96:4c:83:82:6f:5f:fd:84:bf:41:fb:46:
05:00:66:b1:cf:c9:bc:d6:32:04:8d:80:87:12:8d:c7:a8:c3:
53:d8:64:54:a2:ef:79:e2:e4:6e:7b:f3:84:59:a9:0d:4f:c4:
c1:34:f7:90:13:30:f3:7a:dd:94:ba:43:c1:29:51:2f:5b:da:
d7:41:ea:3f:5c:92:6d:99:95:02:e8:99:19:2e:7a:1c:38:7e:
9d:97:33:12:57:c0:bc:4a:fd:ba:89:fa:a1:44:5f:0a:7a:72:
5f:35:c6:b5:6d:7e:c5:99:17:e1:dd:62:cf:d4:cd:44:1b:b4:
2d:6b:0f:f4:40:8a:81:b2:af:fc:fb:db:cd:8d:b6:a8:c8:84:
2a:90:16:b5:90:40:0c:d2:9a:d1:30:88:e5:96:d9:3f:79:24:
71:04:cd:02:f6:93:59:6e:c9:a6:06:11:f3:f0:a5:ce:ce:57:
7a:5a:23:45:07:47:b4:80:3a:70:be:f2:e5:20:e4:0e:0b:de:
cd:a9:c2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:58:40 2024 by rpki-client on console-ams.rpki-client.org