Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
File: eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer (raw, json)
Hash identifier: QQdhE5mdDyLk5fPbId8UPFl3pzrCnIbhaiRzwwH4Uvw=
Subject key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3493A8DA794B75415C405F629E56215
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.233.14.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:3a:8d:a7:94:b7:54:15:c4:05:f6:29:e5:62:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:76:f6:f7:78:6c:0a:62:c7:b8:fb:99:57:
45:e2:ee:de:cb:35:d2:b5:06:b6:4b:52:fe:54:e3:
96:f5:ae:11:60:d1:f0:f5:0e:d4:7f:9b:17:ed:0f:
b7:bb:bc:be:d9:be:33:93:30:c2:ec:be:73:3f:53:
87:8f:d5:cd:ae:8b:c0:4e:12:30:59:b3:6b:18:6f:
08:3e:52:cd:2d:a5:89:09:9e:d2:10:82:27:ac:94:
8a:52:dd:f7:88:53:6f:80:0b:79:f0:20:ab:65:50:
05:a3:a1:40:ec:df:d1:c6:ee:91:73:45:b5:96:b5:
77:ee:21:0c:54:b9:8e:37:bd:1a:e6:73:b5:0d:d3:
54:f4:e8:c5:3e:ca:5a:27:97:8b:5a:9a:6b:72:cb:
9a:02:e8:90:c3:82:42:bb:2a:d6:aa:4f:2c:5b:87:
aa:bf:8d:16:ba:ea:76:08:11:e2:a2:d4:24:23:f0:
db:6c:56:b8:3f:52:17:32:79:a1:e5:d6:11:d0:55:
9b:3d:ec:2c:20:dc:72:b6:ab:aa:6d:10:d1:cf:fe:
18:33:47:a6:90:d7:7d:b9:38:0a:34:e4:8c:97:46:
12:d2:2d:8b:b6:b4:41:97:c6:85:2c:6e:15:3c:72:
85:60:d1:7e:fc:ae:95:bd:fc:b5:84:09:c6:73:91:
f1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.14.0/24
Signature Algorithm: sha256WithRSAEncryption
97:37:80:21:e9:80:a3:0b:9f:8f:6b:1b:43:f8:ce:c4:67:6b:
6f:05:dd:17:5a:3a:8b:8b:08:df:29:e7:ff:c7:1c:ad:da:c7:
b9:4d:b3:86:86:5c:7e:d7:2b:6a:c5:6a:b3:8a:db:3c:79:58:
28:f1:8f:b1:d7:31:e9:d0:bf:e7:93:a4:ff:af:4b:39:7a:9a:
f2:10:04:29:c1:81:42:c9:1b:9c:be:57:c0:f8:db:7b:a0:c2:
16:1e:35:3f:c9:11:5f:67:b6:1f:b2:0b:b2:e9:30:d4:b9:10:
28:f4:9e:e2:22:dc:e2:88:c2:86:dd:95:e4:fb:41:90:7c:c3:
6d:22:dd:54:dd:27:81:f9:bb:15:0d:7d:25:46:ac:53:07:47:
63:4a:20:f9:e5:7f:b5:16:e5:a1:3d:db:06:5f:73:98:a2:e1:
6e:7f:32:94:c8:d1:24:1a:10:00:73:b9:95:f0:33:13:0f:a4:
51:b2:7b:fc:1f:55:34:99:fd:69:af:c0:a1:3c:8e:b1:78:f4:
00:84:ef:6b:a5:94:96:ae:91:09:82:23:49:18:14:7a:5a:1f:
72:58:32:c9:25:e5:10:3d:85:d9:f3:70:58:0b:4d:9e:ec:32:
b1:c4:aa:99:7f:db:2f:ea:b7:d1:d3:be:50:5c:d2:fd:9e:73:
60:09:aa:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:05:20 2024 by rpki-client on console-ams.rpki-client.org