Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
File: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer (raw, json)
Hash identifier: U15cLnUyYD7MBgfNxnPjuhrGJ9zxQ5UZsLOv7K7JOAo=
Subject key identifier: 66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAFAE96827DD72DD0A3A61810003A9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.147.254.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:fa:e9:68:27:dd:72:dd:0a:3a:61:81:00:03:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:61:6f:8e:a3:a5:c7:51:cc:24:fe:1a:ec:
03:5b:19:ea:12:95:bb:93:9d:6b:56:02:a2:f6:fe:
72:e8:a0:b4:01:6e:f1:79:5b:d8:0e:17:51:68:7c:
83:78:bc:33:ce:a5:77:0d:13:fd:01:5a:80:61:77:
85:1e:52:13:8e:07:f1:1e:88:dc:3d:21:60:d9:76:
59:2e:7b:ce:00:9f:0b:1e:06:75:a2:28:70:85:db:
47:f2:08:62:63:d7:86:14:39:97:2c:fd:9c:2d:50:
39:29:06:93:cb:55:81:fc:dc:55:b1:71:bd:88:20:
41:d6:30:0c:46:1a:b7:84:cf:42:86:71:a3:d0:7d:
a2:cf:f7:a2:0b:9c:d1:55:ff:7b:00:df:c2:6a:6f:
ba:f0:27:af:38:ab:84:03:b1:ef:59:16:ed:eb:50:
a4:b9:8e:09:c5:9b:f6:d9:9d:79:5c:a9:bf:7a:26:
54:b9:e8:f1:2d:d4:01:65:d6:36:94:5b:7f:bf:c5:
bb:4a:86:c7:71:fe:b5:71:a5:30:34:a8:c6:bc:c7:
d5:b8:cb:48:dd:19:45:ba:97:72:76:48:77:aa:e5:
2a:82:9d:bc:2a:66:84:ab:23:d5:b7:cd:aa:ae:f3:
72:8f:1d:3d:5e:e5:4a:a9:55:0a:47:ce:88:f8:d7:
86:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.254.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:d3:22:12:e7:ac:fe:8c:4c:ff:f4:20:78:25:00:99:9b:0b:
53:51:97:77:8c:a1:ba:b5:28:34:e4:57:58:ad:67:2b:ee:54:
ed:a6:f2:34:54:0b:2c:b9:72:ee:1b:2d:69:6f:29:56:0c:c4:
43:f5:40:bb:59:89:90:6d:b5:c8:d0:38:c6:b0:55:4b:15:e6:
64:34:9c:40:f8:9f:7b:b4:b4:e0:b2:08:27:8a:5c:f0:7e:f2:
76:fe:d3:cb:04:83:28:31:2e:5e:b0:d5:16:8d:d7:44:4c:d9:
59:66:5b:b6:a7:09:b8:d4:da:ec:60:43:69:94:5a:82:a1:c0:
29:c0:01:d9:14:f8:aa:d9:2e:9c:99:a3:43:43:dd:d5:de:83:
96:0a:06:08:b5:d4:d6:28:e2:32:73:3e:7a:0d:1b:43:78:0a:
a3:0f:1d:f1:6c:22:61:42:5a:29:07:f3:ac:af:e9:2e:4b:d1:
a2:4c:f3:a5:86:f3:69:7d:a1:44:6a:bb:bb:2c:69:1a:3d:16:
57:05:55:ee:c9:c2:20:22:68:b6:c5:2b:5e:07:16:a6:c8:5d:
4c:f8:17:87:8a:16:1d:22:9f:e8:f4:b2:32:fe:94:33:48:27:
1f:7a:c3:ae:7f:45:56:01:c4:d0:75:71:b8:50:e3:37:93:6e:
a6:21:59:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:06:41 2024 by rpki-client on console-fra.rpki-client.org