Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/clOCbDGl92CXvNwqL2UZiKE2flM.cer
File: clOCbDGl92CXvNwqL2UZiKE2flM.cer (raw, json)
Hash identifier: ZMMiuMu7pX5sO6nzXRi7tlepT7PJYFUS3IEK1XWzR0M=
Subject key identifier: 72:53:82:6C:31:A5:F7:60:97:BC:DC:2A:2F:65:19:88:A1:36:7E:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B7163F4660D170300D466E256BA0E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.17.200.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:71:63:f4:66:0d:17:03:00:d4:66:e2:56:ba:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7253826c31a5f76097bcdc2a2f651988a1367e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:64:91:1a:34:83:f0:c0:ea:e5:41:3a:e0:cd:
94:a9:4e:28:69:49:09:7f:b7:98:9c:21:a5:f6:b2:
8a:56:c3:62:10:57:fa:cb:96:79:b4:85:34:da:fc:
e7:21:eb:64:75:5b:3c:24:78:31:d0:e2:85:fa:e0:
58:74:78:2c:50:ad:e7:c8:16:2c:49:0a:45:0f:20:
ea:ba:13:4f:98:2b:fa:16:21:9b:6c:db:41:19:a9:
e2:20:40:72:3d:2c:4c:12:de:e1:cf:15:76:ed:0b:
4a:15:7a:41:3f:0e:6b:ad:c6:07:95:1b:8e:96:c0:
26:7b:db:e5:28:c4:27:04:e8:4c:92:16:58:66:be:
46:a1:3c:cd:2f:6f:d3:b3:a9:54:3c:99:90:bf:b8:
a2:21:53:07:f0:57:ba:77:43:57:53:71:ec:d4:fc:
05:88:fd:28:b5:c7:73:a1:d4:96:44:8e:c7:e7:6e:
ab:75:80:dd:57:c6:02:3a:22:f8:58:b3:75:a6:1c:
a2:5a:bd:e9:5d:01:54:f6:cd:10:93:49:7b:e3:72:
07:e3:84:fc:3e:47:a5:2e:3f:a3:07:a3:fb:8a:64:
e3:c2:f5:96:42:46:3f:ef:14:cc:f9:d6:a1:e1:ec:
0c:6e:e3:38:58:0d:d4:94:66:a2:27:cf:84:74:98:
f1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:53:82:6C:31:A5:F7:60:97:BC:DC:2A:2F:65:19:88:A1:36:7E:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.200.0/24
Signature Algorithm: sha256WithRSAEncryption
50:1a:90:00:d1:0a:bf:5f:b7:df:dc:85:b9:96:f5:24:68:d0:
f8:5b:53:7a:b5:c6:ad:12:6c:85:cd:bc:9a:d3:8c:73:f0:ab:
6e:30:52:90:c6:ff:06:bd:da:a2:43:bd:6f:2b:00:82:63:9f:
9c:6c:f6:07:a8:b5:ba:cc:ac:b7:9d:9f:84:36:fe:32:3c:e8:
68:89:af:fe:b6:10:92:5c:28:c3:df:ef:c9:cd:ae:a7:e9:ce:
eb:da:f7:ac:d6:d6:df:e8:e6:d4:ee:2c:53:13:34:b4:f7:31:
0d:4b:8c:9e:5b:15:f4:2b:fa:c4:ac:2b:3e:d6:35:0d:ee:b0:
7f:85:23:15:23:2b:bd:a6:8a:24:ed:af:17:b9:85:ae:30:6a:
a7:b6:97:e4:09:2e:e3:95:49:ed:6f:15:d5:1c:27:1b:fd:6a:
0b:82:14:fd:de:5a:0e:93:01:dd:76:9a:86:8d:d9:81:bc:7b:
cc:f4:cd:86:0f:24:9d:ef:78:35:a2:f2:74:38:35:90:f6:80:
3e:d9:79:ea:5b:1f:06:eb:47:21:f1:02:36:24:74:6b:55:93:
d6:b7:2d:00:7c:f7:85:4f:e6:a2:2d:1b:f8:0a:09:8e:51:db:
6a:88:2f:83:58:f4:04:29:15:de:db:67:d1:20:d6:22:77:90:
ef:ab:33:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:15:17 2024 by rpki-client on console-ams.rpki-client.org