Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
File: SMuUpENJ-Y1Am33bmgU99K7xrd8.cer (raw, json)
Hash identifier: jUnoWontOJOTQ3HJQxyPSDmfBaRhaeB9R3ysCCHlytQ=
Subject key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC479EEE72CA4C94DB18ACFFED0D11
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.80.30.0/24
IP: 2a10:3900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:47:9e:ee:72:ca:4c:94:db:18:ac:ff:ed:0d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:9b:7e:fc:be:13:77:fe:79:5d:57:8d:35:
50:a7:0a:b3:0b:35:e9:ed:42:a1:49:bd:2d:35:02:
a4:12:a1:35:66:67:99:66:47:7e:c1:a4:18:fd:26:
16:0f:fd:b0:ad:2d:bc:cb:20:f7:01:92:a7:84:db:
a6:02:16:67:e3:d4:14:74:a5:22:06:f5:67:83:b6:
ae:eb:7b:63:0a:21:40:9c:d6:b3:ad:38:43:69:04:
98:ea:ae:a1:c4:a3:ac:36:36:5a:59:89:b7:61:8e:
c3:5e:ca:a7:9d:a6:d5:14:73:af:0f:c3:c4:a5:65:
46:fc:26:a6:c4:ca:dd:38:da:0b:d0:a7:4c:68:33:
5e:36:89:45:7d:7a:6a:91:9e:f5:53:63:c9:cc:d8:
85:ff:fc:89:e8:fa:32:97:e1:96:e4:36:7e:97:59:
57:7b:4d:40:58:61:4c:6c:b0:5b:ea:09:9a:42:0b:
14:49:4b:1e:ac:a8:0a:f8:c6:87:b2:b5:8c:9a:5e:
a1:38:fb:3f:fd:7d:79:36:a4:3b:0e:f3:5d:03:0b:
bc:a9:2e:de:a5:54:b3:a2:b1:66:13:4c:4c:05:ee:
7a:c4:ec:72:bb:66:05:ad:d1:1b:76:55:63:15:79:
81:c8:96:22:0f:8d:c4:3b:af:ec:53:4a:df:a7:e1:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.30.0/24
IPv6:
2a10:3900::/29
Signature Algorithm: sha256WithRSAEncryption
77:13:41:41:7f:03:6c:11:fa:ce:04:d5:42:92:8b:b5:90:60:
35:c5:75:5d:03:6c:25:ef:36:f8:6f:33:c5:a7:79:cb:03:bc:
1e:d7:64:e4:5c:4e:f3:04:da:77:df:64:fb:aa:fa:e8:08:19:
5e:ae:49:00:d4:e8:4c:b7:23:5d:e1:9a:2a:83:82:78:ea:b8:
d4:ca:6d:ea:6a:40:ab:56:d5:48:eb:a2:d7:9c:77:9d:70:9e:
a4:93:bc:53:68:42:79:89:9c:f4:17:d0:cf:94:80:50:2f:60:
2d:0a:cf:fb:87:66:0f:65:30:43:85:bd:50:c1:3b:1e:36:87:
d5:44:8e:8e:30:e4:66:04:a8:90:ef:ab:fe:81:e1:d6:7c:ab:
d7:7b:75:85:0b:6f:30:ec:d8:bf:86:85:7b:cb:8a:19:30:2a:
79:5f:e0:7e:4b:9e:9e:d8:6d:aa:d1:7b:7c:00:81:81:39:d7:
09:b9:bd:de:28:f0:d6:3a:14:93:d6:7e:f4:e8:0f:0c:3f:52:
4e:f6:65:7b:40:3a:9f:1c:a1:eb:82:bf:c7:15:be:1b:37:42:
98:73:7c:53:67:39:ae:f9:53:ca:98:3e:f0:6c:59:e3:f0:b3:
04:1c:a8:80:df:4e:49:7f:96:81:9e:c0:6d:1d:34:94:00:d4:
1e:2b:4b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:15:39 2024 by rpki-client on console-fra.rpki-client.org