Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
File: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer (raw, json)
Hash identifier: H27h1a80CnNrmE4PvJU6W/4VM+sKlIoYvzdxn8LlUiI=
Subject key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E50883DD24F1CDF6BEC640C8FADB9FC58
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 18 Mar 2024 07:48:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.247.107.0 -- 193.247.108.255
IP: 193.247.110.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:50:88:3d:d2:4f:1c:df:6b:ec:64:0c:8f:ad:b9:fc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 18 07:48:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b1a238e043fe063a723b63159015393a64afceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:df:44:1d:2c:d3:18:dd:71:84:89:e9:1e:29:
5f:44:4d:aa:49:67:35:b8:66:69:5d:a1:fa:42:98:
8c:a3:7b:4c:3a:9b:af:35:77:2c:4d:c5:89:9c:a8:
88:9d:7f:11:b4:72:45:da:be:17:d1:37:db:0d:1b:
6f:1f:2a:e3:2f:86:18:d5:bc:63:fb:63:a6:3d:f2:
b8:46:63:57:8b:f6:99:47:0c:27:1e:67:72:3f:71:
48:9b:df:ae:13:f1:1f:f3:d4:83:f8:ec:bc:f2:29:
b4:79:5f:d2:d2:c7:bf:34:32:50:ec:2e:5f:05:28:
54:28:3b:3e:6a:ca:d1:1d:9a:db:2d:6a:6e:6c:e9:
81:fd:f3:b3:b7:fc:a1:6d:40:78:ac:e5:85:df:94:
1a:54:c4:5f:01:b0:0a:45:a6:fd:7c:a1:a8:bc:0e:
de:db:14:40:1f:1a:71:9d:3c:29:09:b6:d0:7e:30:
41:51:2f:8f:da:60:b0:6d:b7:69:18:43:97:de:e3:
1d:5d:fc:17:08:41:41:cf:f3:d0:0b:4d:f3:54:5f:
00:39:15:e4:66:92:24:c2:5a:95:94:1b:ac:be:1d:
24:ed:61:28:6c:9d:07:c0:5d:c8:76:2a:7e:18:fc:
06:67:e9:68:85:bf:10:c6:8e:35:4a:d7:e5:f5:9c:
8c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.107.0-193.247.108.255
193.247.110.0/23
Signature Algorithm: sha256WithRSAEncryption
75:7c:a7:8d:29:fb:74:0a:a4:02:e9:e9:a2:31:58:4f:a7:6b:
b1:82:43:54:10:58:06:64:56:b6:5e:11:3e:c4:2d:24:4e:68:
28:68:4d:26:06:2b:ee:50:aa:93:a3:51:66:54:ee:d4:d4:fb:
54:03:c5:b3:73:de:1c:f9:5d:3e:51:77:c4:47:3e:df:54:94:
78:74:05:dc:ce:f2:39:c1:92:dc:94:81:ea:1e:04:32:97:95:
1d:b3:e6:97:fe:6f:de:dc:31:8f:31:c0:6c:ae:c1:f9:3d:a6:
0c:95:ef:69:fc:93:85:3f:dc:28:88:c9:5f:8d:99:59:8b:bd:
63:77:93:5c:a3:6d:3c:7a:49:31:a0:0d:00:33:18:2e:d8:7f:
df:ea:c1:ae:3e:64:26:13:48:90:b2:61:3b:f7:2a:c0:cd:54:
8d:0f:40:d8:89:c7:51:92:35:b8:92:78:ec:36:4e:6a:44:3b:
08:e5:ad:4d:7b:cc:e6:01:14:42:b9:95:2b:b6:1b:f0:e4:88:
d3:08:f6:c9:ad:80:ac:ca:12:2d:ec:fe:97:7d:69:3e:c2:49:
77:bf:f5:fc:a4:06:c9:9e:a7:21:b9:34:2f:9d:e8:80:28:20:
50:e7:a2:c6:ad:ea:0f:17:ef:25:12:8e:82:f8:55:ef:94:d7:
1d:69:f4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:07:55 2024 by rpki-client on console-ams.rpki-client.org