Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
File: a3sSBFsa8JrPlmLuNbos1-HIW60.cer (raw, json)
Hash identifier: 7Yc64SpLJAamxT9yXNqT5vdPRujIOiuzhQb4JC1V9P8=
Subject key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D5A6132686A451B16DB681581C8D01985
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jan 2024 12:38:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 92.119.240.0/22
IP: 2a09:bcc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5a:61:32:68:6a:45:1b:16:db:68:15:81:c8:d0:19:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 30 12:38:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:a4:ca:44:63:f7:cf:0d:a9:1e:20:5a:8e:
9e:28:c7:d7:e5:3b:0f:ec:31:d7:e8:e3:6b:ba:c8:
7f:a0:34:96:a3:6b:6e:b4:79:df:5c:86:c6:aa:64:
60:bb:cb:9c:2c:29:c3:d9:e0:6a:85:9e:c0:eb:5e:
89:b6:7d:20:12:12:9e:39:f6:28:7c:f9:09:23:00:
6d:42:60:09:f0:1e:aa:b9:91:c2:b3:bb:47:b2:b6:
56:de:c0:83:c5:11:1f:7c:7f:fa:9b:4b:e0:b1:39:
cd:fe:f8:5e:34:17:f3:e1:cf:c7:0e:6b:5b:a0:78:
38:ed:eb:3f:80:67:a8:88:b1:04:e4:68:97:7c:8b:
5e:83:c9:5e:8a:6e:c9:7a:2f:81:aa:19:5b:f2:9e:
4a:bb:19:da:48:d5:72:92:01:ac:06:0d:9e:c9:a4:
a6:e0:73:8e:6f:2d:40:3a:f8:52:dd:6b:b1:65:33:
7d:b0:c9:4b:10:9a:50:f3:37:3c:7d:ae:50:77:cc:
b7:5f:f6:95:25:97:af:d1:98:a4:27:b4:55:ad:9d:
55:73:6b:00:12:c6:d8:e0:1b:2a:0a:e6:9b:b9:07:
67:34:f3:bc:02:fb:aa:10:9a:c6:62:53:a6:9a:be:
fb:64:c0:e0:18:27:9d:33:7f:47:4a:35:f5:cb:04:
ed:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.240.0/22
IPv6:
2a09:bcc0::/29
Signature Algorithm: sha256WithRSAEncryption
41:a2:7b:04:93:6b:16:e7:12:e0:4e:19:5c:e3:b9:65:a3:0c:
f0:93:ea:43:90:ca:95:b2:32:cb:23:cc:58:aa:95:08:75:99:
c1:ab:5d:d6:02:48:95:a1:e9:41:8a:8d:fd:b9:88:05:99:b9:
cd:f7:1d:ac:44:e5:6c:4e:2b:78:72:d1:d0:65:fa:1e:eb:72:
cb:0e:a9:ed:27:3d:07:b9:e2:4c:7e:aa:08:c8:26:1d:1b:5b:
ea:c3:e8:32:67:ba:ef:b2:d8:22:5c:19:98:37:d9:32:1b:c5:
0d:22:04:97:21:86:83:a1:e2:0f:e0:fc:e5:02:fb:0f:26:8d:
7b:74:42:33:5c:96:d2:e7:26:91:b5:16:31:0b:e5:20:92:9d:
88:ab:02:e7:d1:76:d1:8b:02:e6:2c:8d:c7:cb:9f:e7:08:31:
9a:12:18:d9:ef:1c:15:38:f4:eb:ce:38:b9:e3:85:7a:6d:fd:
e8:c5:de:d2:5e:90:78:e1:c6:27:84:d4:58:35:7b:4c:67:45:
05:de:93:06:99:5a:33:4b:5b:6c:1a:cc:61:b2:6d:7d:95:57:
33:51:0e:17:1c:c9:ad:d7:84:00:e3:e6:c3:64:74:41:b7:b7:
c8:12:ff:dc:9d:88:4d:7d:e8:34:61:b3:60:2c:38:7a:7a:ff:
8f:e7:a2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:13:21 2024 by rpki-client on console-ams.rpki-client.org