Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
File: V5NTy0LgxPulyuJTpXaLwfJGW5k.cer (raw, json)
Hash identifier: lCTgTJRtHy1hJLj4of3GA4wkfH0LV9/NhPCpUsgDJCQ=
Subject key identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DABE830A73F015297E3CD785F02840
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.25.12.0/22
IP: 2a00:7be0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:be:83:0a:73:f0:15:29:7e:3c:d7:85:f0:28:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:a1:72:fb:bc:fe:40:8d:1b:7f:bc:d3:b4:
37:75:9e:e2:58:59:ab:30:0a:d0:fe:d9:84:fd:0b:
d0:7d:23:39:7f:61:92:7b:c0:d9:49:e2:1c:3c:75:
7a:91:3e:2b:d4:da:14:18:bb:66:7f:b8:8a:5f:3a:
2b:c7:02:53:c1:ba:83:86:d2:1a:e2:ea:36:a0:82:
1c:2f:5e:13:6a:70:c1:41:16:87:e4:87:8e:e1:ca:
ca:1c:42:47:f8:b8:0c:81:b2:19:95:4c:c3:7f:c9:
3d:d5:72:74:20:75:64:f8:eb:4f:1d:99:13:9d:eb:
59:24:d6:f0:52:42:db:99:67:dd:13:2f:2a:de:58:
1d:07:c3:46:24:8a:6b:76:cf:41:44:8f:90:61:ea:
f8:84:3c:06:fd:f3:88:06:a4:dd:4c:29:ea:30:61:
a6:69:eb:4d:8a:c3:84:2d:69:7f:69:27:d8:53:90:
bc:51:9d:44:a8:2d:6d:74:4d:5c:92:6a:f0:7a:c6:
56:e7:31:c7:85:49:da:ef:12:83:10:f6:a8:52:ef:
1e:82:ae:c3:60:80:db:32:95:34:25:c0:f0:2b:07:
7c:40:f7:d7:4f:2e:af:b1:0b:64:c8:7a:40:22:70:
2f:da:77:f1:bb:b2:28:29:94:e1:0e:04:68:4f:d5:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.12.0/22
IPv6:
2a00:7be0::/32
Signature Algorithm: sha256WithRSAEncryption
41:9b:04:16:16:64:f9:35:08:34:24:01:53:5b:22:85:7f:e2:
55:5c:21:3a:53:a8:06:14:de:57:f2:df:33:33:be:82:12:8f:
a6:bb:d4:9d:7d:94:15:ed:b0:d8:49:1b:47:77:7d:06:79:f3:
c0:75:01:d4:b0:05:a1:b2:1c:b0:19:a4:a9:e3:02:c8:47:4f:
09:7a:a8:95:4c:4d:40:fa:cc:d5:23:b9:01:d8:11:b3:74:1c:
b0:1b:22:cb:5e:e4:89:04:66:36:cd:18:90:3d:01:15:95:e3:
02:11:81:08:4a:7b:8e:81:25:9c:ad:fd:7c:18:11:68:e7:27:
7a:be:1c:c6:39:a1:f4:5d:34:59:95:42:0e:f0:a8:5b:e8:61:
62:31:72:5c:fe:96:2f:13:bc:ba:7d:22:8c:11:43:10:2a:b8:
a9:0e:bd:7c:2d:0e:ed:5e:ac:22:cd:3f:2f:93:08:de:dd:e2:
eb:3b:af:2e:30:55:f5:f8:a9:d6:30:47:66:10:3f:83:cc:c2:
21:9b:48:60:6a:55:b1:de:b6:3f:e5:1d:6f:27:af:eb:74:7f:
f1:60:bb:59:48:0e:a8:c8:3b:58:c8:05:ee:d3:1a:db:ac:3c:
81:5f:ce:3b:df:52:9e:9e:d9:fd:15:6c:81:82:89:20:a0:9d:
a2:ff:75:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:02:35 2024 by rpki-client on console-ams.rpki-client.org