Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
File: aVTpCJn_JWRFIHJM3owhFhNgC-8.cer (raw, json)
Hash identifier: IW3nzc6ncvvcUTZFtMHyDWEM599qAFMZINNdCNNHw5M=
Subject key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56ED65A78956BC319D1654C34F67255
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.95.136.0/22
IP: 2a03:cec0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:d6:5a:78:95:6b:c3:19:d1:65:4c:34:f6:72:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6954e90899ff25644520724cde8c211613600bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:00:53:c2:a1:c1:01:df:ff:16:83:5e:98:
d9:70:a3:92:1e:74:e8:c3:a6:32:f7:56:43:e3:a2:
18:c1:9c:7f:07:54:7d:3d:3b:96:95:38:9c:68:01:
ae:15:9f:ef:fe:64:cc:8d:21:28:1b:8e:d4:bb:4b:
46:a1:59:e7:47:52:5d:2a:56:35:3b:23:10:e1:80:
8f:75:0d:b0:01:98:2d:3d:40:69:98:db:ce:e0:0f:
d0:40:b7:c5:b6:2c:50:89:9e:f9:17:7c:91:d1:8e:
25:ba:88:59:c3:7d:b0:83:d1:5f:a9:40:f9:67:89:
01:c6:7b:c8:7b:cb:07:d6:6d:f0:a1:79:eb:f5:b0:
57:5e:d7:3d:7f:3e:24:a4:69:53:30:85:6d:69:21:
4f:31:90:84:2a:c2:ab:79:be:9c:1b:55:a2:33:96:
fe:18:78:4b:3a:76:1d:88:2e:47:de:9e:52:79:21:
9d:58:1f:90:94:9b:13:a9:68:25:08:28:83:82:48:
a0:62:05:15:6c:7d:7d:30:1f:fb:7b:f7:45:91:f2:
c7:17:d3:17:18:2e:73:d7:4f:e8:16:1a:36:2f:3d:
90:e0:18:0b:73:bc:d7:e4:11:46:e6:51:02:d3:bf:
13:aa:9e:2f:b3:6d:df:ad:6f:9a:57:ed:08:3f:f5:
0e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.136.0/22
IPv6:
2a03:cec0::/32
Signature Algorithm: sha256WithRSAEncryption
5b:93:c1:b7:57:42:be:8a:89:fc:96:70:10:ec:71:4f:42:fc:
3e:e6:5a:4a:5f:92:36:4a:14:40:f8:30:7b:6a:4e:27:6c:a9:
d0:e6:45:ac:6d:1e:44:97:7b:4c:c1:fe:61:68:bd:26:f2:a7:
67:a4:ab:71:a3:f8:94:ec:81:c7:71:66:18:a0:a8:0a:e6:28:
ae:fd:29:1f:6c:cc:5b:f3:26:16:27:db:35:a2:f4:7a:0d:2d:
8a:2a:a2:20:d4:85:dc:1f:ec:f9:75:a6:11:c7:9f:11:b6:75:
bd:8f:6b:2c:74:bb:f5:c0:0a:72:a7:e6:22:98:ba:40:b0:43:
18:d2:c4:17:44:19:9d:3b:69:bc:60:ba:82:31:a3:db:5d:7a:
7f:92:e4:c5:c2:99:c8:fd:69:e5:c2:12:22:b6:98:1d:98:c8:
c2:f0:8d:12:22:80:a2:c8:98:5c:2c:d0:c7:c2:5d:67:be:2b:
0a:fd:44:d4:e1:ab:6b:87:4f:45:66:2a:6f:bc:a4:a1:16:c6:
77:7e:ff:d7:ef:8d:cf:61:4f:a2:42:d4:97:32:91:a1:4c:af:
71:a3:96:f9:67:a3:b9:4e:b7:15:ee:80:fa:ad:b4:af:bc:3f:
a2:33:8b:d3:a4:19:5a:1e:ec:ef:dc:09:72:9a:c1:2d:be:05:
84:26:df:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:19 2024 by rpki-client on console-fra.rpki-client.org