Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
File: cZLyKnioBxsCo2Ko2zPo8_ct00g.cer (raw, json)
Hash identifier: 0qJVZuxrlR8LeiTPib3xjyjzlRegs/emH7Z0lxj92e4=
Subject key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC493245EA5FA8E7783182798236C9625
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 192.145.108.0/22
IP: 2a09:5d80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:24:5e:a5:fa:8e:77:83:18:27:98:23:6c:96:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:04:e6:d5:c6:2d:7d:19:16:7a:93:49:c1:
18:a4:b5:36:90:e8:58:aa:7e:a3:65:e2:65:af:ca:
ce:a4:c9:ac:d3:9a:c2:65:6b:84:f1:b7:0f:38:f3:
f2:63:fb:47:2e:12:78:b1:59:75:5f:d9:ee:5b:6c:
02:2b:44:94:5d:1a:ac:38:1a:96:73:0d:fc:d3:57:
20:8c:74:64:46:b8:d5:7b:64:12:b4:b2:33:b7:7a:
88:57:de:c7:23:3c:b4:c1:44:03:00:4c:4e:0f:fa:
27:98:a5:32:5a:61:db:7b:51:3e:80:7d:c5:c5:76:
bd:7c:ea:e9:dd:10:bc:8f:e4:1d:6b:eb:af:83:e9:
2d:ac:82:03:24:9b:0c:a5:e8:fa:d2:c1:20:3f:90:
09:8f:0b:6a:6e:01:12:ac:e9:b2:64:37:b0:e4:f8:
e6:9f:dd:65:b1:ff:47:b5:74:64:1f:84:38:28:90:
a5:94:c3:a9:6c:f5:d7:9f:78:25:de:fc:e1:42:6b:
2c:88:21:05:76:f0:a0:74:34:95:da:63:35:c1:6f:
75:f3:f3:ef:85:31:a1:ac:19:ef:1a:dd:57:57:03:
e1:53:91:41:a0:97:7f:ab:2b:0c:91:4a:3b:1c:08:
ab:82:08:0b:ad:3b:a8:5c:70:dc:6b:fe:6f:44:ab:
d9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.108.0/22
IPv6:
2a09:5d80::/29
Signature Algorithm: sha256WithRSAEncryption
56:fb:e6:89:4d:43:89:92:45:63:00:e8:c2:5d:10:be:94:99:
c9:0e:8d:0c:a9:5b:09:33:1a:ab:cb:7c:ce:d8:4d:4a:71:6b:
36:27:dd:aa:11:d6:f0:40:28:de:a7:b1:73:13:4d:93:6e:21:
3d:25:84:7f:38:41:6a:66:66:8e:5c:4e:14:a6:28:29:60:03:
5f:38:b6:78:2b:39:40:fc:cf:10:c0:0a:0b:c5:33:0c:f3:ae:
54:4d:3a:ca:db:7f:85:f0:ef:f9:44:3c:c0:1d:12:44:2c:36:
50:05:d9:45:b3:65:e8:d2:94:fd:3b:64:e4:fe:83:06:65:4d:
10:19:f4:30:c4:86:92:08:f5:a8:1c:f4:54:9b:d0:1e:d8:a8:
d7:3f:7e:ec:26:cd:8b:9f:f2:75:ac:3c:de:1a:50:15:4b:3a:
7b:6e:c5:a9:3c:7d:41:a3:48:da:dc:a6:49:0f:99:dd:a9:d3:
db:74:15:08:35:3f:23:ab:f9:a6:3a:e1:6e:f1:d7:26:e3:20:
48:1e:7d:11:ab:c2:e0:a1:ed:bb:cd:d3:73:05:52:08:2b:02:
1e:27:43:c3:df:2f:67:fd:92:22:c6:20:40:be:9a:04:06:b9:
00:f6:76:5e:89:70:a9:d2:25:03:91:99:62:d0:f8:15:f8:29:
ba:2e:bc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:46:34 2024 by rpki-client on console-ams.rpki-client.org