Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
File: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer (raw, json)
Hash identifier: 0PVcJ9WYL7bJhoNXgx3we6Oe8p2bHvf3rYglpLj5ldc=
Subject key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DD045C45899D58D960C3B7385EA8E7913
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 22 Feb 2024 10:04:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.149.75.0/24
IP: 2001:67c:29cc::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d0:45:c4:58:99:d5:8d:96:0c:3b:73:85:ea:8e:79:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 22 10:04:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ca:f0:bf:72:13:d1:8b:c9:c4:d0:bd:bd:77:
e8:30:94:44:cb:3d:78:80:64:e0:08:9a:9e:2c:69:
d3:26:ee:67:1e:59:91:d3:4c:e9:8b:0d:c1:da:55:
0a:79:16:a6:9a:d6:a5:7f:35:52:67:be:b8:77:20:
08:5b:b2:28:1d:07:7a:93:03:ad:4c:77:e5:2f:6a:
a1:11:11:c2:fd:ed:b6:65:07:1b:6b:87:f7:40:11:
52:06:96:af:f9:ef:22:38:71:c4:86:4d:ae:14:59:
26:ae:28:27:54:b3:50:9b:26:27:d7:d2:0a:b1:e0:
68:16:e1:b0:c0:b6:b6:47:98:20:e9:b8:8d:56:b1:
f0:86:19:ac:52:5b:d7:f4:3c:8d:b0:4b:57:f0:ef:
6b:1b:32:ed:91:5e:cb:24:94:fb:eb:0a:86:d5:93:
5b:8d:18:97:ea:76:92:3f:fa:b5:f2:e0:87:8b:81:
99:b9:ac:43:87:42:04:45:d5:34:45:31:16:44:02:
66:8d:87:6e:2f:7a:44:0a:ab:82:6e:9a:f6:e4:26:
f2:a8:7b:9b:39:2f:3c:3d:d9:7b:90:b0:d2:13:90:
65:26:c5:85:1e:02:f5:a6:7e:ff:12:c6:e3:48:f4:
8c:48:08:d7:3a:aa:4b:a9:55:83:ff:ac:a5:d3:6d:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.75.0/24
IPv6:
2001:67c:29cc::/48
Signature Algorithm: sha256WithRSAEncryption
50:ca:98:5d:09:ad:82:99:31:1f:10:9b:67:31:c0:9d:72:ef:
69:8d:35:b4:86:b2:f1:dd:43:30:52:8a:2a:6d:2b:d3:c4:34:
92:ac:cd:b7:fd:06:48:b1:47:4e:51:20:c5:aa:8c:4f:4a:78:
9f:25:83:dd:c3:07:8c:41:e1:4f:50:60:ea:69:bd:3b:bb:c5:
1d:a3:7b:45:3b:15:c4:bd:91:ad:b0:cb:4b:b8:e1:90:ce:e6:
52:75:ba:2b:f7:28:a9:3b:a2:1a:db:9c:f7:fe:a7:39:c8:a8:
3c:e9:ea:17:af:f3:ea:2b:36:a1:fd:64:7d:16:c7:9a:c3:39:
1a:3d:2a:db:f1:9a:b3:e7:e6:37:65:5f:ec:6a:61:bc:a9:c1:
83:5b:78:c5:e3:9c:d8:b7:a7:28:21:2f:5b:54:11:8e:b3:d7:
e3:bd:fd:b3:28:00:b4:d4:59:58:2c:43:d7:51:01:65:e6:0f:
65:8e:20:92:b9:72:14:74:52:0d:d9:0e:fe:93:de:c1:66:45:
4a:9a:bf:89:07:d0:ea:d0:0d:7c:ae:58:12:d8:a6:76:b8:0b:
cc:43:81:a2:34:1a:e4:ee:e2:23:cd:75:1f:e9:d4:7b:a5:0b:
e4:3d:91:8c:99:80:f5:b5:be:95:a4:97:dc:27:bd:85:f5:8a:
dc:38:7c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:39:52 2024 by rpki-client on console-fra.rpki-client.org