Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
File: ckC6dE4J4dNstwRstYmVweNRMiA.cer (raw, json)
Hash identifier: InpiboEbY9S8RhXPeSQDqcpGC5WUt/IDOGpVMpWkj7Y=
Subject key identifier: 72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26CF83706B299E18757941D9ADD476E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.84.52.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f8:37:06:b2:99:e1:87:57:94:1d:9a:dd:47:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:c3:b0:1e:a3:c5:e6:58:54:17:a9:b2:75:
bf:da:5e:2f:0e:ad:98:d6:fd:8f:c4:a9:fb:e5:f7:
b6:bf:2f:47:d0:a0:25:94:5a:c0:2e:51:0a:d3:56:
58:e7:83:f8:cc:16:72:be:18:a4:1d:56:57:e2:08:
9e:73:09:5c:09:65:ec:50:15:7f:cd:7b:f5:57:be:
e6:73:4d:85:a3:59:7e:3a:63:0b:91:5d:8e:dd:90:
8f:7a:6b:40:5f:f3:bd:d5:44:b2:ad:c9:76:21:51:
d9:d8:0f:98:7b:e5:63:44:cb:2f:97:74:ec:b4:c2:
10:43:bf:ab:df:53:f6:43:9b:6f:20:9a:60:d2:6a:
2f:9e:01:68:27:61:3d:18:5e:dd:7d:87:72:89:30:
a9:d0:78:52:50:73:59:b0:3d:7e:56:26:66:bc:1a:
96:08:b2:3c:98:6d:12:a3:1f:f7:7e:b3:11:8b:0b:
be:57:3e:d9:b7:5d:e7:90:fd:c2:80:ad:45:cf:0a:
91:82:45:a6:4f:e5:a1:61:be:63:03:5f:e8:52:b8:
89:9d:ec:86:1d:3f:3f:c4:5f:54:9e:34:60:31:d2:
e5:39:bb:9c:3c:a9:13:3d:4a:42:56:94:c1:bb:80:
30:58:b8:57:5d:44:ad:49:09:e4:c7:7e:20:37:2e:
89:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.52.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:09:00:ec:24:c9:49:bc:f1:a1:2d:64:55:3e:f0:09:81:eb:
c1:98:a3:e9:a0:51:08:44:7d:97:67:5a:fc:c3:b5:57:5e:b8:
2c:04:53:62:4f:30:32:bd:7a:79:ba:db:00:cb:99:0a:dc:8b:
d8:30:0d:31:af:d6:92:aa:1d:a7:ac:b6:6f:0b:0e:18:10:17:
cb:19:61:ed:81:8b:0a:23:05:de:01:77:db:73:cc:b0:ed:58:
8c:fb:31:08:dd:11:10:e1:8b:66:91:9d:2d:ff:52:10:77:e4:
22:5e:d3:28:e2:a2:88:69:7f:13:ef:20:f9:b5:16:5b:b9:46:
24:b5:4d:80:3d:7d:54:4b:99:ce:be:d3:36:05:9d:51:2b:26:
0e:d7:ff:f3:f8:c2:cb:3a:2e:82:f5:dc:9e:e1:4c:31:41:1a:
5a:15:b3:18:8a:e0:7e:35:53:72:98:21:b1:92:96:8e:03:99:
7a:73:fd:20:40:e5:28:85:65:c2:1b:9d:72:34:f6:ff:94:b7:
9d:8f:4d:03:50:de:47:25:8a:74:6c:37:5b:91:56:49:be:15:
8a:5f:da:ca:3f:a1:32:aa:57:44:07:b2:31:77:33:24:08:63:
3a:d1:a3:1d:41:24:68:15:6b:ab:12:60:68:ce:21:81:9c:71:
1e:36:ef:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:56:33 2024 by rpki-client on console-fra.rpki-client.org