Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
File: cHjnVjWgncwD9iWoC_pVKyLjZiw.cer (raw, json)
Hash identifier: eo/FotxO0occtPSa32wsNvAm0mXXt471FShF+OvXviI=
Subject key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B903414BF62166493408EBC38A87E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 46.174.16.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:03:41:4b:f6:21:66:49:34:08:eb:c3:8a:87:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:10:af:82:9a:69:63:95:ac:28:c6:b0:d6:bf:
d5:b9:e7:36:62:2c:ea:64:30:0b:47:95:34:12:cb:
11:69:39:c5:96:7b:4b:c6:79:19:3c:bd:6a:ab:d1:
bd:89:21:2e:e6:6a:7a:4d:12:6e:9f:c1:1e:da:bd:
e3:81:5d:c4:a7:64:f4:19:ff:26:4f:2b:cc:30:7c:
65:64:c7:c6:d3:54:6f:4b:cc:05:a8:e6:17:23:cc:
b8:11:ac:9d:78:24:57:a8:b0:1a:70:dd:3e:36:05:
72:23:ba:32:5f:d2:ed:49:f9:68:14:c7:39:6b:2f:
e3:ea:ef:1e:8d:4b:7a:19:38:36:5a:e9:03:88:63:
68:fd:35:f7:0c:60:6e:60:d6:d6:fd:54:0d:9f:06:
f5:e2:32:55:1e:87:02:38:5f:23:a5:e2:d5:7c:ce:
24:70:c1:81:db:b9:ef:0f:19:94:01:b4:36:0c:96:
3f:d3:a2:3b:68:44:04:4b:a9:a1:a1:4c:88:fa:a6:
9f:08:69:93:b9:e0:8d:af:59:f6:f5:b1:cd:a9:4e:
dd:ac:6c:a8:d2:e8:7c:a6:7a:b2:3e:07:42:d5:d0:
a2:42:2a:af:bb:55:60:48:6c:8c:a6:b9:f7:09:28:
f2:73:77:81:78:38:c6:f8:fc:5d:9e:91:28:38:4f:
d5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.16.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:2b:99:a9:e0:68:4d:12:86:ce:df:d5:4c:7d:61:b5:9b:46:
e9:da:b8:7f:38:db:e4:a0:25:91:c4:c9:ee:09:0e:8d:77:92:
e2:ed:dc:a5:0f:c4:03:8b:92:5d:40:60:1f:d5:6b:8b:f0:00:
d4:b6:97:13:b4:75:aa:d3:a7:c4:e4:8c:b8:22:19:dc:83:80:
74:2e:ba:d0:b3:56:4a:ea:d8:bb:17:64:af:fd:f7:88:2b:4e:
ff:80:bd:2b:2c:95:90:f9:8d:6e:4a:b2:61:40:a3:be:8b:3c:
08:90:1d:1a:69:35:fc:23:bd:ca:13:c2:95:28:05:43:22:e6:
0a:4c:70:0c:9b:6c:8a:70:53:8f:45:0f:c7:94:90:11:b8:a3:
8f:e0:14:f8:21:c7:44:09:85:5b:c1:70:18:df:38:20:a2:67:
a0:72:6b:23:a8:cd:a2:38:cf:0c:67:86:08:5f:17:7f:ab:76:
7c:72:71:36:a0:0a:54:59:c8:16:dc:d2:6d:3e:70:76:19:de:
f4:54:5e:74:e6:8a:41:11:63:41:d5:bb:e1:75:7b:99:a8:b1:
f7:25:81:71:27:54:26:06:93:37:c9:ad:35:06:0e:64:db:61:
5a:d3:2c:0b:23:47:02:a4:f3:88:2b:b6:f1:9b:c0:11:ac:64:
40:f7:10:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:54:49 2024 by rpki-client on console-fra.rpki-client.org