Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
File: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer (raw, json)
Hash identifier: rIcasDCgzlG+siERQyhJIQ0isWJIqPL1zwjHsYhuPUQ=
Subject key identifier: 74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EC71892F75D28EE20DA3CEA20EA5CF92D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Apr 2024 08:21:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.111.14.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c7:18:92:f7:5d:28:ee:20:da:3c:ea:20:ea:5c:f9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 10 08:21:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74b083650295189f009aa74c12cbc61ee23fa753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:4f:b5:52:ea:07:3f:b0:a2:89:a2:60:3c:
8e:53:fc:fe:a5:ba:e9:6e:4f:72:2b:9b:a4:20:0e:
53:07:2c:bd:a3:e5:87:16:f1:79:d5:d1:c5:6d:7f:
d4:15:d5:72:7c:94:20:b0:27:45:b8:2e:ae:30:5f:
71:9a:bb:ed:5a:cc:f4:46:0c:41:c3:56:d4:f2:ca:
11:5f:8b:28:11:2c:03:56:75:39:65:e0:de:14:d4:
36:dc:6e:31:1b:be:d7:b3:56:cc:d3:18:ec:83:4c:
fb:26:9d:b0:d4:e1:6c:e7:c5:be:51:73:cc:22:13:
70:d5:9c:1e:b7:42:26:7c:b0:5c:71:cb:f1:fa:5e:
37:f6:06:10:c5:fb:2a:19:99:19:0e:c9:06:05:ba:
b6:4e:26:ee:d9:22:bb:99:5d:04:ee:cd:92:1c:49:
bf:83:a2:9d:ec:8f:4e:12:85:19:2d:0d:a5:64:54:
eb:8b:8f:a6:d6:28:c1:26:71:0f:55:cf:ec:18:98:
10:d9:b3:d0:b4:47:30:40:e8:94:af:92:54:22:81:
9b:74:ec:92:37:05:31:c1:25:8f:d7:99:99:f7:64:
3a:49:b5:fc:24:29:c9:0c:11:5d:bd:7a:d9:1b:9b:
44:a2:39:79:ae:90:83:80:ae:bd:c7:90:ef:e5:c3:
5b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.14.0/23
Signature Algorithm: sha256WithRSAEncryption
03:27:a4:ac:3c:b2:52:c8:60:46:40:1f:bd:aa:20:32:04:38:
ad:a7:9c:53:c3:16:43:a7:06:d9:ac:19:b7:1b:59:56:30:f5:
67:d2:66:85:43:a3:75:47:ed:77:47:dc:95:3a:29:d8:b4:26:
ab:54:84:48:f9:58:c3:2e:67:63:20:31:23:bf:1c:a7:5a:09:
d4:73:2e:7e:8d:e3:6d:f5:06:f8:66:65:03:d1:77:91:22:2c:
cc:58:54:b4:4d:42:c6:38:2d:ca:08:f8:68:a7:5e:49:b9:68:
82:8b:1f:e3:e6:cb:db:58:b4:8d:c1:88:97:3d:d5:26:4a:cf:
0b:ca:11:0e:4d:9d:b1:46:8b:a9:0f:3c:0b:02:ad:b3:a4:98:
43:1e:c5:9a:49:21:be:43:17:50:12:21:ea:fe:2d:2e:6f:e9:
2d:c6:50:92:f7:09:5a:4f:ed:bb:7c:1b:bb:47:26:1f:2a:d3:
86:7b:18:50:c8:e0:82:31:0e:7d:a9:3b:42:c1:3f:2a:92:67:
71:10:9b:bc:2d:f3:03:62:c3:1c:b7:9d:bf:2d:e3:dc:91:41:
7d:5e:d0:36:43:b2:5f:8b:8b:68:7e:c0:b5:60:45:2c:06:17:
1e:18:ee:0e:44:f5:80:81:8b:b6:7f:b1:ac:45:5e:8b:2e:b8:
4d:f2:ad:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:49:37 2024 by rpki-client on console-ams.rpki-client.org