Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer (raw, json)
Hash identifier: s/VuaY3lKdE1bFeRVUNQkt5zAC3XXV6RMOqJ92TgwiI=
Subject key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D4220A9295409E186C68D83EBCC67
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 176.57.200.0/21
IP: 185.75.12.0/22
IP: 2a00:b080::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:42:20:a9:29:54:09:e1:86:c6:8d:83:eb:cc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49c403d43b5f38fca2119cd1409a92763edefe71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:27:c2:33:43:35:15:9a:d5:f0:70:fa:f3:
77:c5:7a:5c:bf:c1:43:d7:95:af:b4:44:0a:ab:41:
7e:b2:2f:40:9e:f1:15:69:9e:23:be:79:14:41:e0:
ec:6c:06:d4:1d:b4:57:a1:a1:18:f7:1e:30:fb:df:
63:be:42:ce:e6:64:f5:4e:03:ab:57:cc:2c:25:91:
0e:83:46:15:a6:d5:87:e4:b6:e1:cf:22:be:5f:3b:
52:f2:9a:16:6b:49:ef:ea:8d:c4:f8:4c:ef:96:7f:
e7:eb:81:8f:a3:ee:c1:4c:cb:77:46:c4:b6:b7:3c:
14:38:55:ab:ab:3b:9b:36:22:84:08:c8:cd:20:d8:
09:c8:eb:fd:26:6b:db:30:2e:5d:18:fb:b0:8a:1a:
35:43:b6:8b:4e:bc:56:66:11:20:e2:ae:56:35:99:
3d:9f:c0:fb:04:ab:1c:60:20:c6:18:c8:58:84:b7:
35:fa:d3:67:7f:47:ec:58:c1:1e:ad:f3:7c:a7:bf:
2c:d0:9e:96:55:15:3d:7d:54:e8:c9:1d:cc:9a:d5:
09:8d:32:4e:81:53:4c:f9:14:c7:08:af:a1:90:ea:
94:91:9c:68:7d:e0:74:f5:e7:19:31:82:3f:44:cd:
28:8b:f1:80:a4:e4:e3:0e:2b:24:37:c9:34:3b:14:
c9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.200.0/21
185.75.12.0/22
IPv6:
2a00:b080::/32
Signature Algorithm: sha256WithRSAEncryption
a9:e2:be:6a:a1:3f:a6:47:7f:7a:84:66:d2:72:f1:95:04:02:
bc:72:e2:c6:98:55:2f:1c:c8:94:92:5a:44:a3:6d:74:e6:4e:
f7:4c:25:85:7e:58:4d:9d:74:ec:ec:a5:d3:89:d5:14:ce:ad:
49:0d:af:5f:be:b1:d2:61:8d:ce:9d:97:56:a8:bb:c4:e0:3e:
0b:9e:49:5b:d7:c2:f5:0e:98:2a:cf:8e:1a:30:c8:a5:ec:78:
fe:ad:e9:21:fb:87:21:58:f2:f9:f6:2c:d8:9e:fd:b0:9e:2f:
ca:e7:e5:07:13:ef:9c:b8:5e:2b:63:cb:08:04:ea:6a:22:cb:
7d:c6:33:f3:88:e6:2d:fd:d6:10:1d:ec:17:d0:29:d8:07:33:
c8:55:70:46:31:25:0a:7b:54:68:7f:13:96:14:68:97:19:6b:
e5:f8:d3:41:02:20:5e:67:af:be:c2:39:4d:45:e5:65:5b:13:
83:9c:26:71:e8:b6:08:85:29:ab:bd:97:d8:a5:e8:d1:64:da:
09:1e:ed:a6:10:01:9e:69:e4:00:5b:b6:3d:01:f5:4c:57:c7:
6e:1b:9a:13:a4:e5:93:cc:6d:32:94:93:b0:f1:6a:78:55:12:
67:ea:44:70:58:a6:01:3c:29:90:ae:58:6d:6f:16:22:0a:82:
ef:44:a4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:45:33 2024 by rpki-client on console-ams.rpki-client.org