Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
File: _caA7hsnw6bwcBPI_CXr_wxn-50.cer (raw, json)
Hash identifier: QgpETl+AjT92BhNpjkbo5MaxrAvHyR0qD1iTj8XsmKY=
Subject key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC425528CE8C8D96F541E3E96166479B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.147.229.0/24
IP: 2001:67c:c0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:52:8c:e8:c8:d9:6f:54:1e:3e:96:16:64:79:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:0d:29:b9:30:a5:eb:14:b0:06:e6:3b:63:
f0:67:35:00:6b:40:e3:a7:d0:20:cc:56:99:b6:c8:
7b:11:39:8c:6b:bc:92:e8:d4:e9:cc:1b:b6:d4:cf:
d3:22:28:9d:fa:51:ee:29:fb:42:15:9f:0e:59:27:
89:fa:b4:fc:7d:ac:23:0e:72:97:a7:ef:11:c1:73:
99:93:4b:df:f5:37:25:1e:86:91:1b:f0:4b:84:f4:
39:20:0d:8b:23:f2:e0:4b:52:35:51:95:5c:90:49:
68:9e:e9:e2:08:f6:3d:39:9e:93:65:c9:41:29:6f:
92:37:ca:8c:20:6d:54:54:c3:0b:f6:8b:62:92:ef:
0b:ae:da:5f:15:9a:4a:a1:f0:fa:cf:e0:c2:ed:e3:
c8:78:58:ac:43:dc:79:ea:22:75:cd:41:6a:5e:fb:
bf:58:08:02:93:ab:27:c9:cb:47:ac:b1:6a:1b:5e:
91:7f:71:b8:87:ed:ca:b8:7e:98:25:33:d5:5d:ad:
d4:c4:0f:f0:49:14:f8:e0:be:76:fc:a9:af:5d:68:
7a:b9:ef:b1:4c:43:25:85:47:bc:b6:70:2d:ea:f3:
8c:e5:06:f4:f6:a4:03:53:cd:01:2d:78:13:38:74:
a7:a0:38:e1:6f:8f:f1:d4:a2:94:92:1c:66:94:43:
82:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.229.0/24
IPv6:
2001:67c:c0::/48
Signature Algorithm: sha256WithRSAEncryption
66:f0:4b:e0:ff:88:a0:16:ae:53:13:12:bb:c5:5e:7b:ed:03:
de:81:f2:f3:a6:ac:6b:e0:25:d0:5d:53:86:ee:4c:8c:61:79:
29:4c:35:c1:bd:8d:70:4b:f8:cd:60:ad:b8:fc:c5:4d:d7:3b:
18:d1:62:1a:69:14:2b:e1:1d:f8:48:0a:ac:28:b6:ac:4c:58:
3e:59:72:28:6c:ea:1e:fd:0f:7b:91:ef:a7:96:05:8c:3a:12:
58:03:94:7e:27:17:c4:fd:ea:d9:eb:cb:98:89:10:a7:d1:30:
76:bc:53:d1:49:8f:bc:d8:57:45:e6:1c:3e:1c:f0:6c:6d:88:
4f:ec:60:62:d8:bc:f7:81:9d:18:37:2d:88:c8:58:7c:ab:0d:
69:c4:34:02:fd:27:b8:5c:ee:58:81:ab:82:da:6b:74:7c:be:
5a:2e:1c:dc:43:41:2e:31:17:3f:fa:11:60:75:cb:b7:9b:b6:
d3:8b:cb:bf:a1:d6:90:53:61:bb:e4:67:dd:92:99:80:5c:44:
ea:30:8d:fd:28:60:6a:97:06:9c:99:f4:d6:5a:89:27:66:45:
d1:4e:dc:5c:23:ea:d9:7d:a8:07:9e:86:46:0a:4a:62:a5:d8:
6d:4f:a0:2b:9a:d6:b0:ae:75:8e:86:c4:05:52:1b:09:7f:f5:
e5:28:74:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:50:11 2024 by rpki-client on console-ams.rpki-client.org