Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/boP2mIANaucZlwrfqk-4gvpRVt8.cer
File: boP2mIANaucZlwrfqk-4gvpRVt8.cer (raw, json)
Hash identifier: UvBFCTbvMiPfJ7JIumYSGpq4iEWbwxBOPZnXRux4GnA=
Subject key identifier: 6E:83:F6:98:80:0D:6A:E7:19:97:0A:DF:AA:4F:B8:82:FA:51:56:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4922E422D307DC36D143AA9B2B50ED5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/59d1ba-d3af-446d-ad8b-6f762dfc0d0b/1/boP2mIANaucZlwrfqk-4gvpRVt8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/59d1ba-d3af-446d-ad8b-6f762dfc0d0b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.144.172.0/22
IP: 2a0e:ef40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:2e:42:2d:30:7d:c3:6d:14:3a:a9:b2:b5:0e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e83f698800d6ae719970adfaa4fb882fa5156df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:91:67:b4:54:8b:94:6f:cb:a8:70:4b:5f:bc:
df:89:8d:e8:89:ee:52:85:7b:8c:82:22:47:55:fe:
8c:2e:0e:2b:7f:2c:b5:ed:d6:ee:37:a8:33:52:d4:
55:d1:56:97:8e:65:84:09:75:94:7a:5e:ec:5d:fd:
bd:06:c3:9d:c8:a8:5b:62:1b:df:95:fb:7e:99:3c:
4b:ec:da:74:18:bd:42:ae:86:a4:b2:40:42:c1:a6:
18:44:4d:61:1b:9b:97:06:17:fa:7d:43:5b:9f:92:
de:f9:cb:a1:9b:87:79:82:0b:24:56:3b:a8:b0:9e:
98:31:ea:1d:58:38:4c:d0:2d:2a:ff:13:1e:8b:1e:
4e:3d:c2:48:3e:8c:06:ea:9f:f9:e0:d2:98:fa:96:
90:cd:a7:62:ef:11:9c:ca:bb:72:99:f2:02:29:6e:
7b:4a:51:d9:4e:13:91:a2:ff:06:83:14:44:cb:5c:
ee:94:f8:1a:07:8e:37:90:cd:a8:3e:74:7f:19:48:
0e:8e:93:cd:d0:7d:7b:9f:5e:b9:43:53:6e:0c:b1:
13:44:24:28:ea:22:29:32:1e:26:69:bd:c3:0d:e5:
73:ab:82:60:fe:05:84:5b:43:33:45:e5:00:2a:f9:
de:91:f6:f0:e6:43:fb:fc:08:2b:d1:5a:87:af:4f:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:83:F6:98:80:0D:6A:E7:19:97:0A:DF:AA:4F:B8:82:FA:51:56:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59d1ba-d3af-446d-ad8b-6f762dfc0d0b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59d1ba-d3af-446d-ad8b-6f762dfc0d0b/1/boP2mIANaucZlwrfqk-4gvpRVt8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/22
IPv6:
2a0e:ef40::/29
Signature Algorithm: sha256WithRSAEncryption
12:be:59:3f:06:e0:b4:1b:c8:21:72:e2:83:0a:39:1e:fe:1f:
e1:69:e7:b4:f5:5e:43:61:9e:04:9c:72:44:15:04:e7:ce:d9:
4d:76:7d:9f:5a:6d:00:78:ec:cf:41:1c:33:43:d6:8a:f7:78:
3c:6e:eb:8e:e2:9d:ff:17:9b:cd:e6:c5:b5:c6:63:66:59:6b:
a7:0d:62:22:29:ac:9c:44:90:c2:0d:39:28:d8:21:46:4d:86:
1e:0f:b3:8a:16:c8:77:61:bb:82:b8:97:8a:00:20:98:96:b0:
fc:c6:c9:90:99:97:9b:1c:b2:26:ad:1d:f1:b1:69:96:7a:c9:
e2:81:f6:a9:34:87:6a:41:23:48:2b:7c:7a:28:b4:1f:5c:62:
40:08:ac:24:13:fc:d8:be:98:a8:db:64:1b:6e:64:04:65:30:
96:35:4f:f0:88:ec:65:3a:a9:50:26:bd:b1:32:55:3b:37:c5:
78:2b:82:2b:34:b5:6d:d3:16:b2:f0:3e:63:4c:31:ab:a9:e4:
1b:c9:cd:c8:51:60:20:f5:d7:0b:bb:20:f0:03:c3:b8:8d:6e:
df:7a:50:de:2d:54:00:95:c8:f0:ac:22:d9:2b:4a:30:47:cb:
de:00:9f:84:45:00:75:39:c4:bd:e4:64:08:12:c8:3f:cf:32:
de:f5:bf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:34:35 2024 by rpki-client on console-fra.rpki-client.org