Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aAEhsZmykd53Y9jByqezzcNWGBA.cer
File: aAEhsZmykd53Y9jByqezzcNWGBA.cer (raw, json)
Hash identifier: K9lkB1Kvtkvy/5ICTbar4oPhrWWQfJjb1NoKzjfDsz8=
Subject key identifier: 68:01:21:B1:99:B2:91:DE:77:63:D8:C1:CA:A7:B3:CD:C3:56:18:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7F82AB340CB09A3D5F10E3B4D96EB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/aAEhsZmykd53Y9jByqezzcNWGBA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.128.226.0/24
IP: 2a14:2300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:f8:2a:b3:40:cb:09:a3:d5:f1:0e:3b:4d:96:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=680121b199b291de7763d8c1caa7b3cdc3561810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1c:79:63:57:63:a9:1f:43:b1:56:e5:5b:f0:
d5:13:a0:68:10:7f:9f:06:c8:fe:58:03:9e:c4:e7:
74:9a:84:ec:6f:63:06:e9:3c:f5:50:88:d3:ab:2f:
86:fa:75:fc:a9:ab:b7:dc:d6:4c:b9:29:fb:cd:71:
83:80:45:ce:8e:06:8d:49:5d:9d:22:7a:61:e3:4e:
84:e1:3c:a1:e1:6c:66:39:f5:90:de:d6:6b:2d:a3:
db:ed:b5:b9:a5:a0:81:0a:76:93:5a:13:9f:3c:30:
f7:99:f4:38:b3:5f:37:aa:a8:cb:e5:80:1b:c3:fe:
0b:3c:d5:ae:73:44:a0:08:b9:5c:77:a0:a0:35:c4:
c8:d6:ce:c0:b7:63:14:ca:11:e9:8c:84:b8:70:32:
3b:7a:6c:51:2d:42:66:e4:5a:5e:da:2b:5b:ee:16:
c0:33:ef:a6:3a:12:9b:54:87:9d:9b:7c:3a:20:32:
84:9e:91:a4:e8:6b:50:97:e8:d0:c4:2f:93:6c:7a:
3f:ab:30:52:12:b4:2e:5c:b2:1a:7d:8e:64:6c:d1:
4b:db:1e:8f:2b:36:d1:9f:60:c4:2d:d4:26:e4:43:
63:1d:4e:e5:15:29:e3:4c:6b:72:be:c8:c5:2c:68:
8b:7e:e4:2f:a9:76:fa:82:92:2a:dc:0d:54:de:60:
30:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:01:21:B1:99:B2:91:DE:77:63:D8:C1:CA:A7:B3:CD:C3:56:18:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/aAEhsZmykd53Y9jByqezzcNWGBA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.226.0/24
IPv6:
2a14:2300::/29
Signature Algorithm: sha256WithRSAEncryption
12:fc:b7:89:4f:2c:d0:a4:3a:fc:fa:7f:bf:17:aa:d3:65:69:
52:5f:8a:23:73:92:79:46:e7:60:68:a2:49:58:41:1c:1d:38:
47:3d:c3:b4:73:27:b5:64:99:72:46:2e:d8:ea:b9:9c:ac:05:
da:d5:11:60:e6:a8:54:08:88:b6:8d:00:64:6c:e2:b8:cd:7a:
c9:c9:9f:5f:6f:66:a9:4b:72:ec:3d:69:b7:6c:d0:b2:f0:0f:
3f:bd:f2:97:60:49:46:c9:99:33:c2:f3:9e:46:5c:2a:80:84:
ac:fb:69:81:be:8d:43:ab:d6:58:66:00:01:52:4d:0a:8e:45:
6d:f8:65:86:d9:74:71:f0:81:58:12:6d:e7:89:a4:a5:5b:7f:
ef:10:0a:50:15:c7:14:7f:0f:96:52:4c:76:a9:f3:05:73:fa:
e1:5a:65:9d:0e:71:47:49:60:6a:bf:2a:39:c4:89:b9:e9:4a:
9c:4b:f1:70:5d:b2:56:70:75:7f:a7:16:9a:49:69:78:b1:a7:
7e:05:30:41:93:04:a8:f5:85:11:f4:10:97:72:38:d0:06:b6:
a0:38:79:13:54:00:d5:db:d6:be:31:56:fb:3e:f5:d3:0f:87:
a2:48:a5:dd:81:b1:7e:58:25:a3:d6:b9:86:f1:43:e1:5b:d2:
7c:1c:fe:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:39:58 2024 by rpki-client on console-ams.rpki-client.org