Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer
File: aMwyXIrZdpobVNopYwX-DDZXN3U.cer (raw, json)
Hash identifier: 8Vn0O8yz5JA5XDCQfjsi8/tQV7NgE3bpdlYVSyXfdF0=
Subject key identifier: 68:CC:32:5C:8A:D9:76:9A:1B:54:DA:29:63:05:FE:0C:36:57:37:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA9A056751EDBAA97DEDD7623E5F34AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:35:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 80.88.80.0/20
IP: 85.235.128.0/19
IP: 93.186.240.0/20
IP: 193.254.240.0/23
IP: 195.128.234.0/23
IP: 195.225.168.0/22
IP: 195.234.171.0/24
IP: 195.250.34.0/24
IP: 212.237.0.0/18
IP: 217.61.96.0/19
IP: 217.73.224.0/20
IP: 2a01:5940::/32
IP: 2a02:fd40::/29
IP: 2a03:cdc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:9a:05:67:51:ed:ba:a9:7d:ed:d7:62:3e:5f:34:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:35:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68cc325c8ad9769a1b54da296305fe0c36573775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:df:61:ab:1d:4c:68:c8:18:33:80:6c:dd:
94:97:1d:ba:2c:f4:3b:3a:a9:53:e2:d2:36:45:b1:
c4:6f:b5:06:7a:db:57:3b:ae:9e:d9:77:6b:38:51:
da:7d:e1:84:6c:38:af:ce:da:f2:50:c6:33:5b:c0:
6e:16:fe:66:7d:77:38:36:86:53:20:e2:64:da:d2:
42:ca:b3:81:6c:44:15:f1:f9:83:ed:36:59:77:8d:
d3:c5:68:f8:e4:f7:00:ee:25:01:53:98:f2:be:9b:
3f:b0:b8:82:de:00:53:f6:94:b2:8d:2e:6b:8c:f3:
ac:40:8a:b0:6c:2c:fc:5c:48:c6:c2:24:bb:21:03:
8a:9b:2b:60:e1:5e:b8:b5:a6:52:0f:05:db:17:99:
a9:a6:cb:98:01:30:97:42:6e:f0:c8:45:11:7f:16:
5e:b3:8f:b6:54:86:92:84:4c:31:98:5b:69:eb:c9:
fc:a0:5d:77:53:96:36:88:c2:a8:ad:5f:31:bd:9c:
41:5a:9e:21:30:38:af:a2:1f:e6:b9:f0:90:12:2d:
9b:88:f1:0b:6d:29:3d:c3:1c:f7:fc:7b:27:49:c7:
51:b9:be:85:6b:02:b0:83:96:dc:55:11:1c:c2:ad:
54:2a:ab:94:eb:a1:c7:8e:ef:b8:0c:bf:08:e8:5e:
e8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CC:32:5C:8A:D9:76:9A:1B:54:DA:29:63:05:FE:0C:36:57:37:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.88.80.0/20
85.235.128.0/19
93.186.240.0/20
193.254.240.0/23
195.128.234.0/23
195.225.168.0/22
195.234.171.0/24
195.250.34.0/24
212.237.0.0/18
217.61.96.0/19
217.73.224.0/20
IPv6:
2a01:5940::/32
2a02:fd40::/29
2a03:cdc0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:f4:ee:8f:6e:2b:d1:d8:84:b3:32:07:4e:8a:86:25:33:8a:
05:38:f5:59:d7:a1:b5:34:9b:65:5b:f8:cf:e9:d0:df:1d:24:
2d:a1:d2:ca:02:e4:b8:ab:28:9d:51:7b:50:5a:f7:f8:30:2e:
e1:38:88:80:46:85:7b:19:4a:c4:51:18:bf:69:ff:96:4e:a6:
95:81:eb:ad:64:e8:51:0c:f5:d9:8a:18:a3:86:d0:ca:41:c5:
4a:5e:6a:6f:94:1d:92:d7:5c:92:ae:03:8e:df:9f:db:05:96:
a9:63:e4:72:99:8b:a5:51:8f:b4:ea:b9:c9:4f:e7:8b:ab:b4:
48:5b:c0:18:06:3d:93:c8:f4:15:c0:ef:d2:e3:a5:04:a2:f7:
bf:8d:a2:21:ca:b1:1f:d2:98:ad:7d:02:1c:92:b6:70:3c:17:
51:a4:54:df:0b:ec:e3:00:b3:35:29:85:cc:6b:1c:6a:7d:89:
23:01:12:2a:46:59:82:71:3c:77:4e:f7:22:ee:5c:b0:6c:4b:
ac:1a:b3:37:62:63:62:36:48:86:08:95:ef:2b:4e:2d:e0:0c:
e4:36:c8:28:a7:5d:32:c6:1b:7a:64:11:af:27:54:b3:ad:e8:
45:51:20:ce:49:a5:1e:5d:ef:2d:3f:81:c2:54:53:be:ec:27:
2e:87:f5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:07:51 2024 by rpki-client on console-ams.rpki-client.org