Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
File: eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer (raw, json)
Hash identifier: 0+vplyz7YWIWiutgMmFYdriLZU+n2IzlpVxlBBLyMDA=
Subject key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42556BF7FD90EA86FFB7F137399FB93
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.29.25.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:56:bf:7f:d9:0e:a8:6f:fb:7f:13:73:99:fb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:2c:2d:02:66:b7:fd:37:18:d2:f3:43:92:
4b:d1:dc:be:92:b7:9e:32:e6:8d:59:ed:3f:8f:a5:
9b:ba:18:a3:c7:ac:25:a2:60:cf:c0:e7:72:e8:c2:
39:5a:76:c6:75:a7:89:97:f5:a1:7d:4f:0e:5e:61:
8c:42:04:e2:e4:17:75:ee:51:4b:55:36:84:15:c2:
cf:64:3b:a0:89:f6:5a:c2:ef:77:eb:7a:db:2c:e5:
9f:69:36:53:cf:cc:dc:13:93:bd:bf:1c:57:67:5d:
ce:94:85:a7:86:5c:e2:43:f2:86:85:88:e7:04:9d:
53:11:2a:cc:f3:04:2d:46:ef:ea:9c:b3:b4:6e:b0:
d2:f9:1b:e7:e2:9d:43:8d:38:bc:1b:b0:27:0c:55:
5c:7e:fe:d5:ab:0e:be:a6:93:09:46:ee:9f:72:a4:
86:9b:98:67:9f:8b:18:0f:af:3f:5a:bc:71:b6:ec:
d9:7e:c1:69:78:db:f1:54:6f:ca:f4:5e:78:19:99:
6e:f1:43:96:fc:61:8f:ce:7f:ee:1e:ff:5c:6e:ba:
ae:ee:c5:47:72:86:fb:b9:10:a0:ed:f2:fe:2d:08:
a7:65:e7:fe:ca:a6:f9:c7:f6:11:3d:91:64:47:6c:
dd:63:37:25:15:32:39:ed:e2:4c:da:9e:24:47:38:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.25.0/24
Signature Algorithm: sha256WithRSAEncryption
91:69:61:d5:ab:8e:43:25:f0:5a:73:92:87:7d:01:13:06:c1:
c6:dd:60:aa:7a:fe:a3:39:26:33:9b:09:d7:a5:07:54:f2:48:
57:2a:b7:4b:3d:f1:73:76:20:98:8c:f8:0c:76:21:c7:fc:8e:
26:aa:2f:7f:31:7f:46:01:16:16:b4:42:5c:55:04:10:3b:d4:
09:99:b2:9b:83:21:ec:d0:c1:e8:f2:e9:f3:61:10:92:5c:59:
34:f1:1a:bd:9a:0f:f1:cf:88:ab:d0:fe:31:6b:55:0c:38:e2:
b6:f9:a2:f5:f1:54:d3:90:16:e0:aa:18:61:0d:1f:b0:9c:82:
e1:8f:13:5b:e9:7b:e9:2f:15:aa:27:fd:13:b6:2b:a8:83:dd:
da:20:35:51:6f:e2:3c:c5:22:73:40:e9:12:77:85:9e:1d:83:
31:39:39:9b:d4:d7:40:36:c1:83:47:2a:a2:8a:bb:d1:6f:fb:
38:05:ee:61:25:80:13:19:11:30:ad:75:53:cf:ea:8b:1e:d9:
d2:66:59:36:a0:fa:6d:9a:9e:44:c9:a6:16:96:2a:a4:11:c6:
f9:b4:57:ad:47:38:1b:7c:0c:61:bf:c7:0b:bf:a9:ae:1f:24:
f3:0b:1c:66:f5:8c:9f:b0:80:52:be:ba:a0:28:de:a9:2b:65:
c3:ca:a8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:27:15 2024 by rpki-client on console-ams.rpki-client.org