Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
File: aQvbGIma-yf-H_eAUW_MC5PIuA0.cer (raw, json)
Hash identifier: FvHr5ncak9ArrbFcMxxkrwRAMRft8gIaNgAva6Eg0YI=
Subject key identifier: 69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94BF4ACBAC30E6458ED817C8A4C3312
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:30:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.4.153.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:f4:ac:ba:c3:0e:64:58:ed:81:7c:8a:4c:33:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:44:4b:0c:31:78:b1:8e:63:d4:a8:43:9e:
96:22:4e:48:b7:0b:e0:39:a1:b6:da:09:2b:8e:3f:
a6:75:72:12:9c:3f:41:f8:22:89:2f:12:75:8f:c8:
37:32:30:4b:f7:83:34:f2:13:95:98:5b:2d:e6:ab:
e9:e4:6a:95:10:52:c2:6f:a5:bb:2b:90:3e:88:6c:
93:1e:04:ab:33:01:08:a7:c0:34:60:71:7c:6f:65:
a1:7e:42:2b:44:ec:45:67:2c:f2:54:a3:a1:61:e9:
c5:ef:6b:e1:12:1d:05:3b:3a:e2:19:50:38:2c:e0:
3c:37:6a:c9:4b:af:b7:11:e2:94:3b:5b:f7:41:23:
50:85:09:67:3d:66:ab:63:98:09:8e:c6:c9:0b:e8:
3b:d8:fc:9e:35:91:ac:2f:7c:36:8e:42:ce:ee:b2:
b5:ae:4c:00:5c:e1:01:1b:70:e4:6c:9f:b8:3a:89:
b8:64:f2:52:cf:7a:99:f2:72:aa:76:89:7f:db:8f:
8b:aa:9a:52:b4:01:e0:0e:e8:54:c9:9e:8a:47:06:
23:a4:20:83:c6:d6:e1:a1:7d:28:02:d6:09:7d:42:
80:ad:a3:1a:f1:c3:f1:75:a9:4d:ff:73:9f:e1:56:
6f:4b:a4:66:07:46:92:23:1c:a5:32:15:34:01:dd:
bd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.4.153.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ec:4d:e7:8d:44:63:35:e9:a5:4e:b8:e2:3b:e2:2f:18:5a:
ad:29:cc:f2:0a:0b:39:fa:c5:c2:a1:b7:8d:67:1f:91:35:d6:
ee:b5:d8:8e:03:a6:2e:d5:c4:b0:ec:de:a3:2c:7d:fd:1e:b3:
38:31:25:35:55:7c:bb:a7:14:ad:d8:c7:7d:8f:e8:be:36:e2:
28:c2:89:72:b0:48:c7:3a:90:68:cb:46:25:7b:05:19:e2:87:
fd:08:3f:a5:00:25:ca:f9:61:05:74:26:c5:70:b0:96:3d:32:
e9:b7:5e:27:ea:dd:ac:e9:3e:31:5a:5a:28:9d:9a:ea:f4:16:
09:d5:db:73:44:0e:4c:28:39:08:1c:a9:17:de:ba:a7:52:c3:
d0:d3:ea:b3:41:8c:22:c6:9b:e2:69:79:be:54:55:70:63:b3:
66:3e:fc:95:2f:8f:e8:44:1b:08:80:20:3b:01:c5:b8:a0:89:
7e:04:3e:e0:42:46:a1:dd:c1:d9:b5:e6:16:5f:2d:d0:c4:22:
cb:98:f0:ad:f4:5a:58:76:df:26:9d:aa:4f:1d:3a:7c:57:d6:
4a:d5:20:a0:5e:72:23:29:07:6a:e5:10:a7:1d:08:4b:95:76:
c2:1a:05:a5:02:62:ce:cd:e1:74:7f:e4:b9:ac:92:3a:b4:08:
61:d7:ea:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:17 2024 by rpki-client on console-fra.rpki-client.org