Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
File: cNvqB1PfCD5XgrufOAtdeZy3igY.cer (raw, json)
Hash identifier: oi1BWl4xMDaXLza4DDGjigLQR4GyDxKrZs86mASnGb8=
Subject key identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26CEEDDC62F53CB4F61D94601E72495
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 132.252.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:ee:dd:c6:2f:53:cb:4f:61:d9:46:01:e7:24:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:9c:fb:fe:78:05:ba:ee:3d:4e:77:ef:1a:
c6:10:48:30:fb:f9:c3:91:0e:63:b9:99:c5:23:80:
f7:ac:2f:aa:ce:b7:35:8e:7e:a1:59:2c:3d:b2:6b:
7c:6a:f5:dd:59:38:f1:a1:23:e1:5f:9a:af:a3:01:
52:ce:05:49:0e:7c:e9:71:72:58:93:d1:a8:b9:4b:
bd:7b:6d:40:e2:60:3b:54:27:cd:3f:94:22:2b:52:
56:9b:4c:33:89:2b:6f:3a:cf:ac:23:23:a4:cb:be:
eb:f3:c4:16:c8:f6:51:9f:60:d8:26:4e:71:5f:b0:
ed:d3:2a:ee:38:58:aa:d4:c6:2f:fb:43:c4:96:12:
9d:8d:aa:0b:f2:10:1f:27:91:3f:76:95:4e:6b:dc:
b0:e7:d3:b2:16:73:1d:53:34:5b:08:11:ba:b7:7a:
d9:3b:d0:de:e0:b4:66:af:9f:c0:23:f3:55:44:b8:
d5:ca:7c:0d:d8:89:54:f5:6b:ad:43:25:b8:47:bf:
b5:1a:f4:b2:53:8e:1a:af:d3:bf:a1:94:17:d8:e0:
08:ca:05:8e:d7:45:3c:e2:54:6b:a6:ba:4b:d8:e3:
f6:07:0f:52:10:07:56:ae:83:10:80:db:f7:5a:f2:
5d:85:64:5d:b4:fd:62:2e:62:27:10:94:49:8a:84:
cc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.252.0.0/16
Signature Algorithm: sha256WithRSAEncryption
69:4c:63:76:97:44:31:89:93:6e:53:3c:87:32:62:a7:fa:89:
af:a3:90:73:55:e2:81:38:05:3f:ac:d7:43:f1:29:f1:25:e7:
4e:d2:53:dc:81:0f:88:ba:ae:4a:4f:b1:03:6b:a6:1b:a8:96:
cd:cb:d2:82:31:6b:29:1e:9a:1c:e6:33:7f:d1:ff:da:52:66:
6a:21:69:95:9e:4f:34:3b:61:69:ce:bb:4d:c0:8c:1f:58:7d:
20:da:50:d9:d0:64:b1:39:a6:32:ca:6c:92:a5:ec:f7:13:b0:
aa:5b:51:3c:46:5d:3f:21:1b:61:35:34:e9:d4:f1:c5:46:5b:
23:34:77:34:5a:2d:e9:4a:9e:8c:68:25:e7:3d:a8:73:f0:fb:
d1:1d:fa:fb:35:22:5f:a0:e5:d4:ce:67:a7:a1:1d:17:d1:00:
f9:a3:9f:a6:65:f1:75:ea:72:10:0c:83:41:bc:6f:08:b1:5c:
a5:df:79:f4:d4:21:ce:9c:3b:7e:1a:60:64:e5:8a:c3:3a:1a:
db:5f:9e:36:94:48:63:da:b1:b2:6f:c1:88:01:45:a2:44:0c:
44:44:32:05:ba:10:e2:e3:5e:a4:a0:9e:b1:c1:04:32:d3:56:
72:74:44:65:0d:0d:c2:2c:14:ff:5d:62:45:cb:a7:5a:13:85:
c7:11:9a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:58:27 2024 by rpki-client on console-ams.rpki-client.org