Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer
File: SeuKtOPXneJ90f1pIZbi454aO6M.cer (raw, json)
Hash identifier: 4WysXtLVxMQjSyZEenD8/QoT2/VtHhqjDlSxjZ34jcU=
Subject key identifier: 49:EB:8A:B4:E3:D7:9D:E2:7D:D1:FD:69:21:96:E2:E3:9E:1A:3B:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EEA8FD8729C696E5B733E6638657D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.146.236.0/22
IP: 2a0f:4800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ea:8f:d8:72:9c:69:6e:5b:73:3e:66:38:65:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49eb8ab4e3d79de27dd1fd692196e2e39e1a3ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:5a:23:1d:4d:a2:92:d1:74:9b:fc:5d:86:
da:8a:e5:91:5e:06:d1:00:b7:bd:03:1a:1d:e1:72:
dd:4c:94:be:ed:45:7f:da:ce:04:d5:e4:7a:bb:42:
38:c9:16:e9:b3:74:6a:bc:bf:4c:f1:59:a0:10:85:
7f:76:f5:1c:40:03:b1:4c:e5:24:c3:a1:ff:72:77:
61:26:35:b2:9a:c5:58:5e:23:a7:ae:f1:94:c8:2e:
e1:1f:e4:43:67:ba:78:23:cb:86:b5:ae:5f:6e:bb:
5b:f0:f9:2f:b1:95:b9:f0:e5:c4:0a:8f:41:34:1a:
b2:e9:cc:f6:e8:81:72:9f:1b:6e:fd:b0:40:4a:93:
bf:8d:38:62:cb:63:2b:0e:1f:12:44:94:12:45:6f:
6e:46:07:e0:e4:c3:73:b8:1c:8e:29:c8:9b:28:d9:
03:08:03:cc:46:ba:a7:1d:d5:ca:97:c8:06:08:44:
24:4c:ff:9d:87:4e:c6:08:fe:51:d4:e8:7f:25:08:
a2:f6:8e:55:66:ec:c9:5b:e8:3e:68:27:49:eb:33:
61:73:a7:28:22:ab:08:c4:a3:28:e1:17:43:2b:a5:
7a:a8:12:93:2d:14:c2:3c:6c:8f:7e:e8:64:3d:7b:
b3:f3:1b:64:04:16:0b:fb:18:77:06:50:7a:23:f5:
8b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EB:8A:B4:E3:D7:9D:E2:7D:D1:FD:69:21:96:E2:E3:9E:1A:3B:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.236.0/22
IPv6:
2a0f:4800::/29
Signature Algorithm: sha256WithRSAEncryption
26:6f:0c:13:97:11:5e:b5:d7:bb:16:d7:ef:52:e2:1e:56:84:
07:f5:d9:4a:54:f0:a7:71:8c:df:84:4d:c8:92:be:a0:54:42:
02:e1:d7:af:e2:74:1e:d9:77:c2:0b:b2:2b:b2:55:6a:31:3d:
75:5e:e9:c8:b9:8d:ab:5a:5d:54:5e:43:84:ff:d7:d7:20:42:
54:0f:9a:55:b1:40:c1:a0:a8:82:a8:51:ce:bb:2b:55:12:dc:
97:dc:2d:2a:1d:ee:94:df:08:97:6f:b6:7b:ff:c5:68:96:cb:
3a:d5:67:81:77:c0:a6:0a:39:0c:83:fe:ce:e0:ec:4f:f0:59:
5b:13:c1:04:00:e3:7e:1e:e8:df:f4:88:f3:a2:eb:e4:f6:25:
a4:81:af:6e:05:e2:a8:39:43:4d:ec:dd:f8:3a:22:f2:1d:69:
7b:8d:cd:14:38:d9:29:1f:47:1a:76:b3:69:03:41:d7:20:e0:
53:3e:c4:88:72:ca:35:96:87:27:ba:2c:54:60:12:41:be:bf:
d7:b6:fb:e2:57:fc:0a:98:65:81:52:6d:56:1d:e7:19:1f:64:
96:27:a6:8e:e7:9d:2d:36:41:53:91:1f:89:4a:ec:27:d4:02:
96:e2:e2:bf:13:41:0d:c5:1c:16:d7:f4:2f:58:ce:be:38:0d:
11:b3:bf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:01:05 2024 by rpki-client on console-ams.rpki-client.org