Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
File: eC-fO7vgtR6p6bLpbGhodI-gePc.cer (raw, json)
Hash identifier: +3V0RPE+4LUCggJ48LsxODk/+L4s4Fm5278BvuzmmiU=
Subject key identifier: 78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E259DBDECBF85DACEBAA0AA94A0F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.209.44.0/24
IP: 193.29.52.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:25:9d:bd:ec:bf:85:da:ce:ba:a0:aa:94:a0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:48:28:ab:1e:a4:29:ed:64:07:c6:76:2b:
72:e0:7b:8d:32:70:4f:8b:e3:40:71:73:c6:b8:20:
1c:80:9b:e9:b7:ac:92:3d:fd:4b:24:2a:f9:18:26:
1c:63:cc:93:29:b8:36:53:4a:be:fa:a3:53:1e:e1:
f9:79:a0:89:ac:89:2f:68:58:a4:d8:a1:dd:ed:d6:
1d:05:6a:ed:44:da:02:8c:00:5d:23:e2:f4:59:8d:
ee:4c:b3:31:82:0e:a6:bf:3a:f7:d9:7f:08:c2:ca:
1d:98:6b:c9:19:30:56:0e:78:46:7b:ce:dd:26:30:
e3:f9:af:51:c8:8d:ae:80:13:12:c4:1f:53:42:d5:
8b:7a:47:b4:7f:a5:b1:8f:d1:6b:ee:2f:79:fb:25:
86:ce:d3:00:e1:5e:fd:2a:ce:2d:b0:9b:4a:2f:bf:
f7:02:09:74:74:cc:c0:20:fe:f8:13:b6:cf:93:57:
e6:8b:96:11:22:17:b1:a1:6b:95:5a:a4:3c:c7:68:
24:53:2e:42:f8:61:be:ca:f8:22:e6:4d:13:98:ee:
52:0d:16:da:20:08:45:01:48:37:f6:09:25:f4:69:
14:64:f3:18:b7:28:a0:4c:cf:2f:71:d2:72:b3:ea:
49:1c:ea:c6:ec:4b:05:5a:06:a1:94:7d:9c:46:56:
4a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.44.0/24
193.29.52.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:64:aa:c4:f2:32:99:35:f7:c6:a2:8f:c5:5e:65:a7:b7:91:
19:49:39:ba:32:fb:30:dd:cd:50:34:41:08:33:5b:a4:13:29:
39:b0:79:b1:94:54:42:0c:7b:6a:a8:fb:a1:3a:40:0d:fe:79:
f9:19:c4:8a:d3:fb:ff:da:e6:f4:c7:8e:80:2f:6b:8d:09:27:
3e:f0:77:4e:6f:b2:4f:d9:28:ae:85:5c:91:e0:c3:a4:1b:75:
d1:d2:8b:7b:be:3d:74:7a:87:48:f2:99:ed:19:9d:b6:c9:69:
19:b3:a4:e0:9a:2d:4d:5c:aa:0e:4d:34:e3:b4:87:ee:d8:47:
5d:9b:17:6a:fd:f1:95:8b:7f:3a:c0:9b:80:65:03:18:76:9b:
f3:11:93:ff:c0:d7:70:03:ab:0a:75:6d:ef:98:42:18:f0:45:
76:28:68:7d:b3:91:a3:f7:8b:71:03:3e:83:33:bc:d5:30:c6:
dd:74:67:a0:5c:db:63:1b:b1:fb:36:6c:f6:91:83:04:97:35:
f3:c2:30:53:19:60:76:08:6e:be:0c:c0:cc:f4:37:69:5a:64:
34:9c:b3:90:c0:ee:b5:b1:1e:af:a7:ce:ac:b2:89:05:e9:1a:
a6:39:b1:6d:98:45:fc:94:9c:aa:be:8d:44:13:06:be:60:bd:
13:49:9b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:04:47 2024 by rpki-client on console-ams.rpki-client.org