Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
File: aJbZwUqKtdiwtAgYfs4VoNI87hw.cer (raw, json)
Hash identifier: oVVr9IjQOpgOhuS5QnpeEqEVpTx6iPKHPBwvhPRzS+o=
Subject key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DCE4865B245777E9E092651B9ED73B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 192.109.36.0/24
IP: 2001:678:b10::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:e4:86:5b:24:57:77:e9:e0:92:65:1b:9e:d7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:6e:f3:2a:6d:c0:09:b0:10:af:c1:94:44:
15:62:28:7c:d7:fe:84:7c:64:7b:3c:d5:88:68:ae:
52:7d:45:dc:f7:b2:82:3d:52:81:33:27:36:b4:c6:
bb:0e:82:71:1f:67:f7:8f:48:b8:90:94:2a:08:98:
39:6e:5d:58:8a:a7:77:57:ae:1f:d7:aa:cb:6e:7e:
f3:23:4f:09:8f:93:53:5c:ba:de:b1:f4:86:6c:7a:
8a:9e:65:94:7f:95:37:f2:57:bb:40:45:8d:e6:19:
61:3b:a5:4c:ae:6a:60:47:44:d9:92:4d:bd:5b:95:
5b:8f:75:16:5b:1f:a6:e3:a7:8c:e5:e7:d3:20:19:
7e:29:c4:2a:d8:80:79:39:0c:3c:62:9d:cc:62:26:
5e:5b:29:f8:ce:2d:ca:6b:b1:30:8d:44:b4:88:67:
bf:d6:26:ed:3a:8c:39:f5:25:43:16:fb:e3:88:f1:
4c:85:54:21:26:b6:90:a8:9d:ce:30:f5:59:cb:9e:
d9:65:b7:c6:36:05:05:46:45:44:79:5f:de:64:9d:
73:a5:71:42:8a:d1:0e:93:49:4e:d3:20:66:01:b9:
b4:e8:0e:7b:d9:2a:f1:fd:86:77:4f:5d:6c:00:b3:
4f:96:f1:72:12:6e:62:ee:e4:56:ce:ea:f1:e4:be:
08:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.36.0/24
IPv6:
2001:678:b10::/48
Signature Algorithm: sha256WithRSAEncryption
85:5f:d7:62:99:c7:ec:c2:43:07:d0:15:a6:c9:2a:06:e5:83:
69:ba:d0:9c:49:6c:d5:9b:12:67:4c:66:e9:8c:1e:5a:b1:38:
8b:8c:48:37:2c:b2:f1:f8:5d:18:6b:4e:cf:ca:e7:05:be:68:
18:44:6d:65:7c:8b:f4:c3:2d:0d:87:90:77:79:97:73:e2:d4:
16:f3:e1:7a:0c:db:51:eb:47:34:25:d3:ba:71:e9:64:b5:9c:
4a:ec:33:a4:df:70:b1:b4:53:8e:87:9c:c8:55:87:f3:17:46:
fa:2a:35:10:c9:3b:fc:63:2f:1d:66:b9:26:d7:bf:ca:19:3b:
0a:33:00:62:68:2c:6f:04:8d:eb:9d:43:f8:cf:56:c5:82:d2:
6d:47:b9:73:ba:02:8f:75:41:ac:d7:36:46:14:ca:87:c1:5a:
ac:40:2e:6b:87:68:0c:e7:29:b6:1b:46:5c:a0:a6:01:ef:82:
f1:70:87:ac:be:2e:46:46:9f:20:84:24:c9:54:a9:f4:f2:af:
35:59:91:82:93:1a:fd:a2:54:82:ce:24:01:34:6d:a5:3f:0b:
f5:b7:76:da:af:af:2a:e4:1a:ef:1f:93:d0:e9:4a:dc:3e:ce:
0f:95:10:66:7f:27:4d:af:bb:88:7d:5b:3e:57:33:d6:93:45:
e8:23:9f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:45:42 2024 by rpki-client on console-fra.rpki-client.org