Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e_e2YOSoOie4TAG4eEYUFtBlMKI.cer
File: e_e2YOSoOie4TAG4eEYUFtBlMKI.cer (raw, json)
Hash identifier: QIvZQZTCRdc8Y37hMWK2xyWGtera88VjgZOHzOHiaPo=
Subject key identifier: 7B:F7:B6:60:E4:A8:3A:27:B8:4C:01:B8:78:46:14:16:D0:65:30:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DE9F0D6EB0D235DA7601D6661038DE46E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/2b77c5-4083-4e86-b47e-302f7694bcb6/1/e_e2YOSoOie4TAG4eEYUFtBlMKI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/2b77c5-4083-4e86-b47e-302f7694bcb6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 27 Feb 2024 09:41:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.243.232.0/22
IP: 2a14:c40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e9:f0:d6:eb:0d:23:5d:a7:60:1d:66:61:03:8d:e4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 27 09:41:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bf7b660e4a83a27b84c01b878461416d06530a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0e:d9:ad:59:bd:5d:b3:50:41:a5:52:24:af:
39:bb:1f:81:f9:7d:93:b3:20:a8:f7:42:2f:6a:1e:
dd:ba:db:d7:c5:14:23:77:68:30:20:15:19:21:e3:
1b:39:0f:0b:a7:3f:40:c9:c0:40:67:8f:35:0a:b2:
ac:06:f7:97:5c:0b:e8:8b:8b:65:b2:ba:76:ff:19:
1b:46:8b:ba:70:1c:7b:37:cd:a0:c8:30:c9:9d:ee:
01:e0:51:ee:b8:5e:50:27:1f:29:15:2f:2b:e9:b3:
79:39:ff:d2:32:96:af:85:ea:8e:c1:c7:5a:d4:d2:
79:22:64:b9:7c:1c:b7:69:11:e1:ec:25:da:78:7f:
77:1e:47:ee:11:0d:02:52:44:8a:ca:dd:81:81:b1:
a7:7a:74:b7:cb:e3:36:bd:73:9b:d4:1f:02:6e:d6:
dc:2f:0c:b8:eb:62:86:2d:7f:ac:95:ed:02:86:20:
a6:b2:95:fd:6a:8b:59:8d:e1:45:3c:2c:01:02:25:
0d:d3:f9:55:1b:94:83:c8:98:18:07:b1:08:73:31:
a9:1b:6b:71:32:9e:80:49:8c:8f:38:da:c8:37:c2:
4c:1d:9b:2d:b3:09:76:f6:75:87:22:9f:ec:21:76:
cc:ad:f7:5e:d6:55:4a:d5:f8:5f:c8:54:6c:a9:3c:
c2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F7:B6:60:E4:A8:3A:27:B8:4C:01:B8:78:46:14:16:D0:65:30:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2b77c5-4083-4e86-b47e-302f7694bcb6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2b77c5-4083-4e86-b47e-302f7694bcb6/1/e_e2YOSoOie4TAG4eEYUFtBlMKI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.232.0/22
IPv6:
2a14:c40::/29
Signature Algorithm: sha256WithRSAEncryption
70:6f:8b:a1:b4:1d:96:70:44:cc:cf:bd:f7:04:a8:51:9c:b6:
cf:10:bf:3d:13:9e:a4:e2:e9:10:3a:d3:b7:88:48:d1:68:53:
53:f3:f9:b9:dd:50:9d:a7:49:1c:1c:46:16:ab:ca:21:22:6d:
f9:fb:de:66:8b:03:c9:4d:9e:4a:d1:9a:df:04:4d:73:3c:ae:
94:a6:56:c1:dc:61:92:a2:f4:2e:1d:87:9a:c0:42:84:c2:61:
53:5b:dc:aa:50:7e:36:ba:d3:d5:93:35:b6:e3:70:38:59:76:
a8:0a:56:7c:f6:61:52:73:f8:39:7b:60:f2:05:8d:f0:58:b9:
77:76:28:46:0b:31:f8:91:f0:7e:68:c9:e5:ff:27:9e:74:9e:
0d:6a:1d:68:dc:b6:b8:63:84:7e:a7:dd:c3:51:59:b0:55:30:
4e:f2:df:5f:d3:e1:b9:c6:5f:32:41:57:61:c1:4d:cf:81:df:
21:73:49:18:b4:31:8d:61:0d:6d:a4:e5:36:58:a7:63:f2:21:
01:8f:36:2b:88:4b:05:44:53:d4:a7:20:ed:8d:b1:8f:07:43:
d5:50:83:ae:20:5b:3c:71:9a:e9:e0:77:41:e6:cd:01:e0:00:
ee:c9:65:a6:85:eb:31:f9:43:d5:74:6a:29:7c:b4:b7:ef:44:
b6:9c:3e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:28:34 2024 by rpki-client on console-fra.rpki-client.org