Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
File: eIeO3aauSgFH23C2YQXP0X8gZqM.cer (raw, json)
Hash identifier: RriUKTM4WgAtAz2VeZbicu6WAhI6gYuZiSGFHddQLMo=
Subject key identifier: 78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8714E63E725DD97454D9AB97C5E8ABF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 149.205.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:4e:63:e7:25:dd:97:45:4d:9a:b9:7c:5e:8a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78878edda6ae4a0147db70b66105cfd17f2066a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:1e:fc:66:a2:21:c4:76:49:10:2d:30:40:
a3:df:ee:91:49:5f:90:fe:36:14:e2:81:49:64:b4:
e9:db:2d:17:be:f4:b2:93:bf:e4:7e:92:a7:01:b3:
2e:60:44:5a:6f:14:fe:a9:c2:a6:6a:08:e0:ff:83:
dc:d4:59:14:41:9d:8d:6e:2e:3f:96:81:b6:c5:9e:
5c:21:47:ca:b2:93:c1:06:ba:1a:bc:20:5a:56:c8:
53:47:8c:8d:1d:f5:fd:81:19:a0:fc:c6:7f:5d:df:
84:9b:11:71:ef:18:f0:98:dc:0a:c6:a1:72:02:e8:
5b:a7:68:c6:07:e1:8c:f5:c1:08:f6:10:f6:fe:bc:
08:ce:ec:43:db:96:fd:8d:f7:18:a0:f3:1f:20:f2:
18:b2:6c:45:23:b5:f8:5e:24:d2:35:64:f3:5e:67:
01:26:34:c0:34:13:cc:8d:14:8e:1b:dc:26:94:b4:
e3:4c:10:fb:ca:9a:a7:36:bd:c9:ce:49:30:2d:34:
0c:3a:b4:06:70:fe:06:1f:93:39:5a:2f:76:78:0c:
24:1f:b5:6e:57:ae:47:25:26:67:1e:f1:16:cf:27:
f4:00:1a:1d:bb:b1:4a:c4:15:7a:f8:46:92:71:a3:
e3:23:48:52:75:b2:c2:5c:d9:5e:1d:99:73:02:54:
33:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.205.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:f1:8d:09:89:7b:68:91:05:62:bc:02:1f:e7:98:57:9d:48:
b2:55:50:63:21:7d:0d:a0:0b:a6:7c:b4:63:d3:c3:b7:38:cb:
77:80:b4:3c:d6:7c:99:4a:05:2a:21:11:45:d7:71:71:4b:f7:
c4:70:d1:d2:43:55:1c:0e:e8:c8:67:d2:3c:34:44:64:b6:6a:
56:b2:90:70:52:9e:30:62:3f:2d:bf:a6:1a:f3:69:3b:10:65:
19:4e:0b:05:0c:4e:8e:6f:35:38:80:e3:e4:ce:57:28:d7:ca:
0d:2d:5b:71:8e:51:4b:2c:87:bb:3c:09:6f:90:97:24:8d:63:
6c:cf:55:15:ac:61:88:a6:c9:a1:8c:a8:cf:7d:68:f1:5c:5e:
b4:73:55:61:51:e8:93:50:19:38:bf:a0:fb:8b:3d:d8:27:6d:
86:fd:4b:18:21:5b:f6:86:25:3e:29:f1:2d:55:d7:db:81:1f:
bb:50:b9:99:94:d9:7e:d2:e2:44:99:43:85:9c:c1:fc:ef:46:
e7:93:03:ea:6a:b0:39:83:47:e3:a8:2f:c9:4a:0f:73:f1:7e:
b1:f3:ee:a9:1c:06:01:8f:c6:5e:92:e1:db:be:be:4a:8a:e1:
81:9f:07:b5:6d:31:a5:bd:79:25:de:8a:3f:23:87:2e:33:dc:
1d:d9:3c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:04:51 2024 by rpki-client on console-ams.rpki-client.org