Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
File: cQ7F-mjPme49u9GUnoIERQOh33I.cer (raw, json)
Hash identifier: Mx++061tI5JAL+Jd24sdA4g736DSfDXnL0qzwlrOCCw=
Subject key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DD0470E8B22880F35ADB5B8B2BA6CE06C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 22 Feb 2024 10:05:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.209.33.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d0:47:0e:8b:22:88:0f:35:ad:b5:b8:b2:ba:6c:e0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 22 10:05:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:14:51:5d:6c:25:51:5a:7e:e7:65:c8:78:
34:d6:d3:65:19:5c:a8:3e:26:e7:4e:75:e4:ba:d3:
83:f1:35:fb:5b:76:58:c5:02:89:6f:33:15:25:db:
0d:50:1f:d5:a6:ee:c3:3d:66:cc:89:db:f0:e1:17:
eb:19:f6:b6:60:56:e0:be:d4:24:e3:51:ea:a5:c5:
92:bd:cb:c9:3c:f6:57:ab:7c:c7:5d:22:58:5d:82:
5e:b0:21:9d:69:18:a5:0d:ab:9b:07:05:3a:7f:28:
c6:4f:1e:c7:ba:81:43:b6:d0:38:6d:bf:06:e0:d7:
18:a5:bb:b0:72:31:bb:3f:49:33:b2:e6:60:68:06:
85:fe:e5:0a:76:4a:b4:87:34:dd:7a:df:3b:79:b6:
69:13:97:88:ee:b8:76:9f:a7:a1:28:be:4c:2f:4b:
11:fc:bc:f3:80:34:16:8f:8f:3f:e6:b9:22:fd:8a:
99:31:8c:ef:bb:44:63:8d:f6:8d:57:44:a8:0a:8f:
bc:3a:ad:25:30:df:2f:0b:96:a6:4d:06:b9:24:53:
2d:d3:69:b4:d7:6d:b9:ae:e1:5d:a6:80:59:5d:b2:
d5:9f:dc:c2:06:30:61:77:79:a0:37:48:c3:1c:d5:
8e:a4:7f:14:d5:42:d4:6c:5d:a9:c4:33:b7:76:d1:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.33.0/24
Signature Algorithm: sha256WithRSAEncryption
97:69:d7:b9:cf:c9:ac:f6:50:7d:96:29:78:ff:78:90:67:33:
af:d3:a1:e5:4f:77:67:ba:96:d3:d6:ef:d6:36:74:49:32:75:
52:db:38:a4:3d:e7:0e:12:af:80:70:aa:f3:d6:0c:1b:42:fe:
41:f6:4d:29:94:f5:ac:65:bc:c5:0e:64:4c:48:6c:d9:12:2e:
e1:9d:af:a9:ed:14:99:63:a4:4f:90:ad:b0:62:70:60:35:3f:
5f:94:3a:17:83:07:71:fc:1c:32:80:e4:36:22:4e:d2:b6:06:
b8:5e:71:8a:89:0c:63:84:70:3a:56:5b:5c:f5:4b:ea:22:12:
b2:d4:7e:31:cf:fe:97:d4:bb:65:73:43:0f:8b:3e:14:53:48:
5d:04:f1:90:fb:d3:77:ff:74:04:92:4c:42:1d:31:be:36:13:
90:31:6c:ff:d3:eb:10:72:dd:b1:10:d1:01:00:0a:c2:6a:dd:
30:3b:43:d6:70:92:97:4c:ed:47:6b:4d:c4:9a:a4:fd:7c:a7:
a3:65:79:73:0a:a1:8b:46:13:7a:89:de:ec:74:97:03:14:34:
9e:7f:c5:d8:87:db:ad:02:b0:c4:d9:12:df:6c:75:aa:1d:1b:
f7:6f:af:c8:33:40:f4:89:f8:f7:f6:ef:06:d1:4d:f3:80:4e:
b7:9d:ad:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:43 2024 by rpki-client on console-ams.rpki-client.org