Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aIPzR-OJH1c9-AFa1swzHM6wR2g.cer
File: aIPzR-OJH1c9-AFa1swzHM6wR2g.cer (raw, json)
Hash identifier: m/Io77QrK8pN7P7WmeyO51chUBx/ae2tt+/fuv+BcGI=
Subject key identifier: 68:83:F3:47:E3:89:1F:57:3D:F8:01:5A:D6:CC:33:1C:CE:B0:47:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D5EC8CDAE8C24A9C661C874A86CDAC993
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 31 Jan 2024 09:10:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.176.99.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:c8:cd:ae:8c:24:a9:c6:61:c8:74:a8:6c:da:c9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 31 09:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6883f347e3891f573df8015ad6cc331cceb04768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:fe:e3:a1:b6:82:1a:75:42:a1:29:c5:da:
f5:24:b4:4c:1e:6e:69:10:b8:a0:2e:2b:70:63:3f:
95:bc:a5:81:81:da:e1:0c:a5:a4:ba:ca:e6:60:02:
66:3f:ee:16:92:64:6d:f7:3e:b7:04:2c:b1:de:05:
74:55:9f:ff:35:4c:71:50:e3:09:f0:38:42:e3:5b:
50:ab:57:27:d7:e9:11:10:84:b9:3e:7f:ea:d7:13:
f3:76:63:bf:cb:f8:1b:af:4c:bd:6f:90:f7:f9:5b:
3f:48:83:b3:60:87:e5:91:ea:5d:e2:bf:af:fd:9f:
9e:0e:b3:ed:62:dd:15:74:a3:0f:74:f4:89:b7:28:
40:7b:4b:c0:1c:ad:7b:80:be:24:0f:03:50:d1:50:
9f:f4:19:41:4b:7c:60:39:34:ca:34:03:ad:ea:f8:
58:50:e7:4b:bb:c1:fe:1c:e9:da:f5:91:3b:dd:80:
21:20:ef:99:60:d8:95:81:a6:bc:f1:47:b6:40:25:
ca:d3:51:3e:36:20:f8:22:c0:ee:3e:7f:14:39:b5:
fd:8c:ac:81:ee:0e:6a:d7:8e:6d:1c:0f:1a:90:23:
c0:70:09:55:c6:a0:20:8d:af:70:bb:6c:12:75:2e:
a5:da:f6:bd:26:f5:11:f2:6e:23:db:36:53:c0:c3:
cd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:83:F3:47:E3:89:1F:57:3D:F8:01:5A:D6:CC:33:1C:CE:B0:47:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.99.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:5a:7a:61:42:ec:0f:83:57:b5:9f:f8:b9:a1:54:24:34:f0:
6c:e7:1f:b7:79:43:b4:aa:3d:83:35:53:1b:59:35:f1:00:d7:
96:53:59:fc:4d:dd:6f:ee:d0:a7:c9:34:2b:76:61:15:be:db:
9a:0e:23:b7:81:82:34:99:14:bd:d7:d0:12:e2:ac:1d:7c:f1:
c5:22:42:b5:03:1d:b4:52:ac:34:ee:ff:62:24:32:03:eb:5b:
8f:92:4e:33:14:47:c7:1e:37:6e:fd:86:73:d6:f3:40:cf:b9:
15:56:cb:8f:fb:61:93:d6:43:c1:1c:14:28:3f:ab:bf:c8:02:
2b:58:a0:13:d9:ac:cc:9e:45:4b:5e:4a:4c:93:fe:26:f6:32:
cc:77:09:18:c1:67:47:ea:4a:ad:b3:81:fa:ce:4b:4b:ad:d7:
d8:65:ca:b9:bf:c6:55:c8:89:cc:28:a9:f6:04:2c:9e:9b:58:
81:9f:90:58:84:49:07:c9:0c:56:16:bb:f2:7d:34:76:ca:b1:
7c:eb:3d:75:2a:60:75:66:1b:2d:62:db:bb:cd:61:22:cd:b1:
b2:6d:18:c5:52:0b:61:bb:a9:9b:74:cf:eb:8f:04:e2:a8:b8:
98:89:aa:5b:92:a3:fa:1b:ee:a0:41:8c:19:71:32:c7:64:fc:
f9:d1:8a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:51:17 2024 by rpki-client on console-ams.rpki-client.org