Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
File: e33o0TUz0eNrETWl0umm_zmFzaI.cer (raw, json)
Hash identifier: 7tAz5kpkQUUZt2ksdqGw9x9PGM/jOKOF8Vu1s/tRDGo=
Subject key identifier: 7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CD3C5BAF4F7E911B4C6C5612280843B45
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 04 Jan 2024 09:20:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.94.88.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d3:c5:ba:f4:f7:e9:11:b4:c6:c5:61:22:80:84:3b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 4 09:20:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:13:1b:66:6d:04:e2:00:c3:a0:f6:10:3e:2e:
43:19:f5:79:f7:b7:9c:85:98:4e:d9:aa:44:25:f7:
33:5f:97:f5:d0:3e:16:4f:43:a3:00:98:e5:d5:f0:
14:8c:3b:ae:9d:45:01:b0:4f:3a:5e:a0:d3:83:ac:
b4:e3:11:6c:70:07:99:b5:d4:64:38:7f:e1:f5:58:
31:a3:86:0c:b6:30:7b:e7:0a:78:c9:98:a2:08:9d:
d3:8f:05:ba:54:79:12:45:2d:19:90:00:e4:1f:d9:
85:53:9b:11:2a:5c:f1:6b:ac:3d:33:c9:87:b4:7a:
6b:ff:f9:00:95:21:5e:b4:91:43:ff:2b:d9:bd:20:
d6:fd:e8:b5:4b:31:f6:38:f7:6d:7f:53:b5:ba:8e:
ba:8e:56:05:50:b9:b7:4b:8b:85:52:e7:47:14:df:
1d:ca:8e:80:8b:41:91:59:58:d5:bd:32:bd:85:f1:
f0:d5:76:33:ed:f6:10:b4:d0:b7:ba:94:11:a9:fa:
74:46:4d:5f:36:f1:bd:ca:0b:e7:b1:9b:c3:05:5a:
7c:43:9a:80:a9:02:f9:6c:8c:bb:47:e9:72:b2:6d:
b5:1d:ab:ab:7c:ee:a1:b1:01:ca:15:84:d5:93:f0:
8c:f6:53:df:60:22:30:7c:d7:c1:09:72:dd:cf:ca:
1c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.88.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:a2:06:a6:47:e4:19:43:a3:8d:9a:d5:a8:0c:2d:d6:87:fe:
4c:b4:4b:4e:50:8d:ef:ec:c5:2c:82:4f:67:55:ff:91:07:3d:
57:31:29:3c:6e:9d:14:0b:64:76:ae:86:6c:79:53:59:a5:99:
e7:81:c6:35:bc:25:b1:cd:8e:8d:c9:8e:6a:ac:6e:6d:06:c6:
78:fb:d1:bf:46:61:d2:41:32:7f:28:bd:ca:de:71:c1:4e:ed:
49:ea:73:17:72:16:3c:16:43:3a:c7:77:c6:ab:3a:4b:8a:1f:
c6:1c:2b:63:1e:b9:d9:7a:ac:8d:ed:18:33:18:00:cf:53:84:
25:24:0a:4e:b4:e3:61:f8:97:38:f0:05:fa:f8:e2:c6:3f:70:
8c:5c:9f:04:7c:17:75:19:77:61:40:14:c6:c7:94:57:3a:3d:
94:f3:8d:f4:d6:d8:df:b9:1d:b9:fc:7a:c1:10:ec:49:17:ac:
27:f1:28:94:8b:df:2d:0f:36:53:93:87:74:9a:09:06:30:87:
0a:c9:89:24:3c:d5:13:f8:d0:d4:0f:8d:18:bb:72:40:20:18:
44:7e:9f:20:6e:c4:1f:0f:18:f5:72:a1:a8:84:83:6b:06:53:
b5:4e:a8:fe:6a:d9:9f:39:99:93:e8:4d:88:05:37:24:ee:7b:
d9:b2:99:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:42:52 2024 by rpki-client on console-fra.rpki-client.org