Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
File: aDjbfmmRJ9pMHFpek_RPMCtihjs.cer (raw, json)
Hash identifier: Zbm9Mf5DGJ3BHi4tdSAVlYYQC3YzACa1aHRAiblGKHU=
Subject key identifier: 68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC8B67BF9231A8F8BB20010E8E1CEA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.218.164.0/22
IP: 2a0b:d9c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:8b:67:bf:92:31:a8:f8:bb:20:01:0e:8e:1c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6838db7e699127da4c1c5a5e93f44f302b62863b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b9:0c:69:6c:bf:77:2d:d5:8d:1b:17:e2:8c:
e5:bc:93:8b:1a:77:e3:be:14:4e:89:06:0a:45:c4:
5d:6d:bb:d2:73:74:e4:b0:c8:21:2c:13:c4:35:2e:
f1:91:87:94:73:3a:af:06:84:fb:a8:a5:18:6f:5f:
84:b8:b3:d0:fc:6f:46:09:b9:f3:85:3e:d1:02:69:
68:67:0a:68:44:1b:9b:5e:25:03:bc:a9:c0:3e:19:
00:5a:cd:d2:d9:de:a1:4b:9f:6a:2e:46:fc:c3:6f:
dd:76:f6:b8:50:2a:78:7e:61:89:b9:c6:e2:2b:30:
f8:f7:5e:54:71:33:e6:8d:c1:3a:8d:82:3d:02:ed:
e1:9d:93:88:13:14:fc:8f:2e:c9:05:d0:f4:22:7c:
cf:3d:fc:ed:f3:cf:81:3a:29:2e:0b:e7:7c:0f:be:
ea:51:17:87:3e:6d:54:5a:9e:0d:2b:2d:e5:bb:fd:
b1:e5:68:09:d6:b6:8f:9e:09:57:ac:14:1b:74:e2:
41:96:cd:6b:be:4a:00:4f:96:3e:f7:d2:00:83:ac:
38:3a:d4:a0:22:21:1d:a3:e5:3c:63:93:04:70:9b:
98:4a:dc:9d:a3:2b:65:1c:79:8a:75:74:1f:50:6d:
d6:35:ad:31:6b:08:f2:36:94:4f:a3:04:5a:07:93:
59:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.164.0/22
IPv6:
2a0b:d9c0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:53:45:30:2c:bb:4f:6d:45:2c:cf:0b:b7:86:d3:d3:05:f4:
ae:5e:fb:2c:37:1b:5f:bd:7f:a5:0a:ef:08:ab:2e:ff:b0:d6:
8c:1b:9b:80:e8:d8:e0:95:bb:f7:5d:41:34:a0:b1:cd:4a:83:
e9:a1:2c:65:0d:92:56:03:33:4f:de:84:47:39:43:96:1b:f3:
c3:10:ee:fd:b1:79:7b:27:6d:a7:4a:29:55:11:eb:0f:ad:bf:
05:f2:35:1d:41:d2:31:96:9c:24:55:1a:14:70:8e:00:e5:06:
20:bf:e6:ce:a3:d8:a0:8c:84:b1:2b:18:46:ea:dd:bd:8e:3c:
d9:3f:3e:e5:2b:18:0b:39:91:ae:6d:fb:fe:a4:e7:21:4a:4b:
67:98:f8:00:12:e7:c8:4d:93:40:c2:5a:13:88:e8:9b:5f:7d:
6f:8a:46:29:ff:d6:5e:ad:3e:25:7f:3c:f1:fc:84:f2:76:14:
96:e2:81:e8:83:50:0f:0d:4b:6d:e6:06:3e:92:fc:1f:b0:77:
b3:6c:53:63:cf:d3:f9:27:85:cc:82:f3:5b:da:10:16:82:eb:
b8:dc:22:00:f4:ca:17:eb:c8:3b:8a:35:5b:0e:b8:d8:3a:3f:
39:8b:4d:7b:a5:f3:3c:01:00:dd:56:f8:22:2c:5b:6c:48:f5:
07:0e:f7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:04 2024 by rpki-client on console-fra.rpki-client.org