Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
File: aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer (raw, json)
Hash identifier: HMxj6BF6Ks5TYwDM6kpvVJu+bguhRr03KWjpeXlu0uA=
Subject key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EA719FFC8DE5B9DB1F2ABAD363375
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.30.111.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:a7:19:ff:c8:de:5b:9d:b1:f2:ab:ad:36:33:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=699710a1693710ac835f0b6745f90d2d680a1200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:f5:5f:05:8b:b6:be:57:7a:c1:5d:45:6e:
be:45:12:22:ab:eb:30:ab:6a:ab:55:8f:6f:9a:c2:
18:da:ef:d5:5e:a1:37:4c:3f:8f:85:5c:cd:88:b2:
88:79:80:41:b8:a8:7e:cd:52:c7:3d:a5:21:d3:9c:
53:da:a0:45:02:b9:24:21:3e:57:03:15:35:af:48:
5e:33:6a:d1:28:37:47:74:2e:fc:76:a1:3f:47:46:
4b:d0:cb:69:02:68:9a:3d:f3:3c:2b:1c:fe:9d:6c:
29:a6:05:d3:df:1e:16:f5:4e:67:34:44:4f:cb:8d:
0e:58:be:d0:4a:99:83:5f:da:b2:b6:af:81:5e:9a:
6d:c7:41:9b:ce:83:0e:ac:9b:f8:b4:31:05:ee:b2:
d3:76:86:cf:cd:c1:b8:8e:a8:2b:1a:bd:fe:8b:5b:
77:03:80:21:27:c1:4f:6e:4b:16:a1:65:9f:7a:f4:
18:1d:e6:a2:1f:1b:ff:12:27:8f:e7:d4:38:2f:ec:
7d:99:10:ac:c6:16:7d:f5:a3:91:63:1d:df:c3:3c:
4a:d3:15:ea:29:a7:ac:9e:94:38:92:c3:aa:d7:b5:
6a:7d:fa:dd:25:67:d8:07:37:f0:fd:3d:ef:16:46:
65:0e:60:c9:e0:32:28:fc:b9:5f:ac:2a:63:0c:2d:
de:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.111.0/24
Signature Algorithm: sha256WithRSAEncryption
23:00:e1:4f:5a:26:ae:c5:b2:1b:19:fe:6a:af:c1:6e:81:44:
a5:e6:5b:45:ad:59:9e:82:a6:d2:52:75:06:fb:b2:dd:e5:bb:
d4:56:32:97:96:f3:6c:84:72:a4:a7:78:07:d5:0d:91:c0:2a:
dd:7b:2e:a7:5e:d4:f1:89:31:80:a0:2b:39:5b:51:bc:be:dd:
2e:c2:ea:01:6b:94:e3:bb:2a:91:5f:89:1f:ab:a3:68:af:f5:
3b:47:a9:e0:68:0d:1a:78:bc:1f:d3:08:75:37:b5:bb:d1:81:
00:d3:66:79:7d:f0:a1:30:d4:bf:d8:2d:e1:37:7b:5e:e1:7d:
f9:6b:60:51:9b:a0:b9:f4:51:3f:8e:82:58:d2:cb:98:c9:31:
e9:7f:39:2e:84:30:72:90:9b:c0:57:cd:90:ff:9b:22:ca:60:
76:c5:d3:56:50:f5:06:22:0f:9b:64:6a:53:47:d3:ba:ad:94:
ef:6f:4a:89:30:dd:0a:55:54:87:7c:58:a8:d2:e1:05:4e:2d:
c7:cb:bf:84:8f:b8:7c:67:e7:4d:1a:63:f4:aa:cf:ee:28:ed:
1c:c7:16:8b:74:be:2c:d7:86:b9:98:7d:d8:c9:ce:f6:6b:05:
f5:60:86:0a:44:58:ea:2a:19:a9:6c:29:86:46:8c:ca:8c:79:
db:ab:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:52:18 2024 by rpki-client on console-ams.rpki-client.org