Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dE6lHvipN-zYTgA6jE5Q2CNLgAA.cer
File: dE6lHvipN-zYTgA6jE5Q2CNLgAA.cer (raw, json)
Hash identifier: Sw2EwGyw6bLtWJrUd0aeVCGae1Rz9shP/TWQYs07+/k=
Subject key identifier: 74:4E:A5:1E:F8:A9:37:EC:D8:4E:00:3A:8C:4E:50:D8:23:4B:80:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50030C46C6E4A86A8EBE12D658ED0D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/1009ac-a0e2-482c-860f-7ebd626cc16b/1/dE6lHvipN-zYTgA6jE5Q2CNLgAA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/1009ac-a0e2-482c-860f-7ebd626cc16b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.178.120.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:30:c4:6c:6e:4a:86:a8:eb:e1:2d:65:8e:d0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=744ea51ef8a937ecd84e003a8c4e50d8234b8000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:e9:c1:d4:a3:eb:03:dc:ee:57:7f:2f:65:
bf:6c:65:64:23:68:04:8e:94:7f:34:ab:49:7f:90:
2c:f2:c5:0b:09:4e:9f:b1:3b:7f:e2:30:cd:30:3e:
d8:de:80:f6:98:73:81:92:f9:3f:11:db:4d:fd:37:
56:25:b7:32:78:c4:e2:3d:7c:51:d7:ac:97:86:12:
6c:1c:55:7f:e7:e6:38:05:87:5f:19:80:cc:24:f8:
38:2a:bb:72:73:55:e0:4f:ab:4e:57:5d:54:5b:fc:
5b:16:42:eb:59:e8:16:77:c3:c5:24:e7:a3:ed:37:
8c:1d:0f:e0:85:11:ac:c3:f0:6f:45:86:b1:7f:80:
ae:eb:a6:40:b9:f3:a3:f1:05:5a:8e:e3:dc:98:b0:
0a:ed:d0:44:12:18:b7:c1:1d:30:9f:94:6f:48:c3:
d7:a8:23:54:c6:3b:a0:29:29:d2:73:24:bc:4b:0f:
8d:51:88:c2:e1:30:1e:25:d8:1d:f2:9c:58:d2:df:
37:e1:e5:5b:82:e0:32:4c:fa:d1:db:a3:4a:33:74:
76:76:c0:aa:8f:14:a3:17:8c:93:4b:85:45:33:9d:
d1:86:df:bc:cc:a9:6b:6e:2e:d6:44:c0:b6:12:3b:
a3:47:0d:89:3c:b4:a9:b8:7e:e1:41:21:66:14:a7:
6f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4E:A5:1E:F8:A9:37:EC:D8:4E:00:3A:8C:4E:50:D8:23:4B:80:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1009ac-a0e2-482c-860f-7ebd626cc16b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1009ac-a0e2-482c-860f-7ebd626cc16b/1/dE6lHvipN-zYTgA6jE5Q2CNLgAA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.120.0/21
Signature Algorithm: sha256WithRSAEncryption
93:4a:f9:6b:2b:b9:57:d0:c6:2c:41:cf:35:ca:c0:35:f8:fd:
c9:a1:44:ea:28:a1:6b:73:88:e9:70:91:5e:c2:94:3f:08:3f:
c7:77:58:9b:49:f3:7c:f3:a1:8f:ff:03:f1:27:8c:43:0d:22:
aa:56:c5:6f:10:7f:6b:f5:17:8b:c6:4e:67:5a:0d:4b:6e:ad:
ea:90:47:c1:85:7e:aa:96:fe:ff:b6:0a:fc:b2:a6:dc:3c:6a:
fc:9b:3e:ab:65:1c:02:d5:1c:f9:6b:7a:3f:72:91:ba:59:d5:
53:e2:09:27:44:c7:dd:69:12:41:79:82:eb:42:19:bf:94:01:
ba:0f:a6:72:88:cf:51:e8:c2:a3:12:4c:7d:cd:7f:22:10:c4:
e5:c5:9a:17:e4:f2:cf:b2:44:6b:54:20:97:8f:7a:7c:ca:2f:
f5:b1:c1:02:10:e8:b6:17:6a:1d:b8:71:b7:b0:71:71:4c:fe:
4b:7f:20:80:a1:a9:ee:9b:86:dd:65:65:56:dc:ba:6c:4f:ff:
bc:87:e8:81:84:02:26:eb:00:29:f4:ec:ff:3b:7b:7f:4e:2a:
6d:b5:61:0f:b1:2b:63:23:f7:d6:52:ad:dd:9b:a0:c8:22:34:
07:7d:07:26:8d:2b:7a:d0:a9:58:6f:68:3e:b0:30:8c:64:11:
9f:a3:76:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:01:38 2024 by rpki-client on console-ams.rpki-client.org