Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
File: aVJaNi6HcFoewCLRZWDydtWc7h0.cer (raw, json)
Hash identifier: Aculu7c3s1YzsMVfxM65XKX0kEiKwCielqqxbR8Sy34=
Subject key identifier: 69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EDADD09D385099244619FD8CD3DF4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.0.220.0/24
IP: 2a12:c4c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:da:dd:09:d3:85:09:92:44:61:9f:d8:cd:3d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69525a362e87705a1ec022d16560f276d59cee1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:65:7a:c7:d1:92:42:3a:ad:c4:7a:66:89:d6:
3d:54:9c:ae:0c:ee:f5:09:c5:aa:bd:1b:4d:f6:3f:
29:dd:20:4d:37:13:b8:42:ee:61:48:59:f6:56:b2:
98:3a:ed:b5:a3:87:95:63:ac:fe:e4:c7:5c:17:02:
f1:9d:d1:79:ee:e9:58:33:16:31:5c:75:75:52:6d:
14:10:75:b9:fb:36:f6:84:1a:db:5a:f8:f3:98:e0:
70:9b:6e:09:4c:61:83:58:e3:bd:a0:33:47:ae:e3:
7d:75:c3:05:50:43:04:75:f3:ab:5f:42:d1:cc:59:
47:be:b2:93:f9:0f:1f:8e:68:c2:7b:f5:d7:1b:28:
18:00:3d:d5:0b:54:85:57:34:c3:a6:bf:39:db:f4:
e2:71:4f:64:ee:9e:df:62:64:e6:66:20:30:96:06:
81:ca:5a:8f:08:fe:0b:53:31:2e:af:73:9a:e6:ef:
c2:08:27:7e:31:c7:0e:a6:23:2e:a2:59:e3:6b:0b:
0e:de:b8:d9:49:ac:13:3b:c1:81:8b:7f:56:fd:82:
87:2f:43:9f:22:92:89:4e:e1:7c:ff:22:2e:20:9b:
9d:5d:4f:24:64:f5:89:05:59:f9:a9:2f:16:70:43:
3c:2c:f8:04:7a:28:7f:a9:b2:ac:50:e6:58:25:02:
d6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.220.0/24
IPv6:
2a12:c4c0::/32
Signature Algorithm: sha256WithRSAEncryption
46:b4:78:fe:33:89:75:4a:fe:f9:43:ae:a3:56:08:95:4f:50:
d2:32:14:8b:da:c4:3f:38:32:f9:8e:0b:4a:cc:13:94:8f:5d:
82:77:17:06:d1:8e:d2:6d:f5:65:46:9e:6f:3a:d7:97:27:9f:
24:5d:a5:75:7f:8b:39:44:f3:58:4a:e1:bc:16:ff:6b:ed:ba:
c8:c2:d9:f0:e6:a4:e2:09:af:18:d5:a0:e5:84:28:d2:e8:2f:
b4:91:9e:82:6e:59:e7:fd:04:1c:8b:0f:bd:7a:73:de:86:8c:
19:b2:a7:cd:e0:b4:fb:ab:bf:d9:ef:4a:2b:a1:45:4f:3b:a0:
63:e6:6c:ec:60:f9:61:18:4b:89:6d:1f:74:1d:f0:07:19:ae:
85:6e:8d:86:c0:b4:62:3f:78:06:3e:2e:de:15:54:14:87:5d:
9a:bd:71:d1:ed:d3:ba:9f:15:db:f9:76:cc:d0:b7:53:97:ea:
f9:9b:70:76:ed:99:d0:58:ea:ac:f3:05:a1:d2:9b:fa:7a:5f:
61:48:c0:d5:f9:0d:1d:b7:af:36:46:15:8a:8f:a7:ec:60:5a:
85:e4:54:ec:8d:26:fa:ff:e7:97:0e:26:18:9a:83:56:8d:ef:
88:40:46:b1:4d:8f:26:c7:61:a3:6d:47:44:2c:18:50:b6:e6:
e1:bb:4b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:26:23 2024 by rpki-client on console-fra.rpki-client.org