Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
File: exPgVmn1VmYr7FZk4QFln5Zsgmo.cer (raw, json)
Hash identifier: ZW3KdGEbaxVG27hpwsamfPjosmNH++zvhZDIwv4fPpI=
Subject key identifier: 7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D5DF2E79ED5F3B442D0EAB9F5C5F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.223.121.0/24
IP: 2001:67c:2f70::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5d:f2:e7:9e:d5:f3:b4:42:d0:ea:b9:f5:c5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b13e05669f556662bec5664e101659f966c826a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:92:eb:cd:49:08:99:a5:a9:2d:fd:ec:89:7c:
8a:ad:d7:27:ed:25:99:88:fc:15:f7:9e:db:18:6e:
b2:b5:a7:ec:4b:7b:a9:2b:cf:17:0d:48:a3:a2:24:
a5:b0:19:d0:b3:4b:ec:8e:62:6f:ff:73:dd:65:12:
23:d7:9c:ca:ad:8f:2e:1d:01:fb:8e:17:08:f1:6f:
bc:10:b2:2b:37:d1:33:e6:26:bb:9b:7f:9a:a9:40:
71:9a:b7:e1:6d:97:13:79:94:cf:ea:d2:d3:8e:77:
cd:e2:ef:ec:d9:00:4a:fa:c4:0c:8b:b6:0e:fc:23:
f0:c3:11:a4:24:20:b0:70:54:fa:7e:a4:f9:7a:6e:
26:12:ac:37:54:63:6d:28:dc:5c:c9:0e:69:08:eb:
f3:d5:ea:91:72:c3:ea:5a:a5:8c:f4:27:b0:e7:e6:
8c:11:de:e8:2a:e7:f4:2e:0b:da:f3:b6:5f:23:61:
94:8b:56:67:6d:5e:7a:62:5d:50:25:f9:21:ed:a7:
6d:9b:8a:19:e6:41:cc:5b:b5:fa:9f:14:a3:f3:82:
42:dc:29:b5:01:99:4c:bf:ca:dd:4d:7d:d3:44:95:
06:e1:bc:fe:16:09:d2:63:61:4a:62:e3:e4:86:47:
ea:83:f0:e8:d1:2e:c7:57:11:61:a1:bb:4d:b5:29:
e6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.121.0/24
IPv6:
2001:67c:2f70::/48
Signature Algorithm: sha256WithRSAEncryption
67:4b:39:0e:2c:ea:3b:6a:58:33:35:68:cb:eb:75:59:1b:36:
de:a2:71:a4:a3:9c:0f:2a:25:cc:6f:51:7e:6d:76:c4:c9:0f:
10:da:13:06:0c:ec:1a:bd:9a:86:c2:6b:87:92:06:6e:2c:d2:
c0:35:e3:62:05:d5:fb:13:3f:3d:d6:10:9a:92:81:71:2e:f0:
df:c2:56:3c:89:8c:7a:d0:16:1e:0c:aa:ed:d1:bf:33:6f:7a:
cf:fd:a2:8f:f6:8b:8c:b6:b2:3d:4d:a4:74:ae:42:16:d7:e3:
88:f9:09:fa:94:ff:cf:42:fd:8a:70:cf:89:cd:64:65:6f:c6:
08:09:ae:f6:be:59:96:78:ab:fc:53:40:bc:a4:e5:3c:44:61:
a0:ab:85:f1:51:a3:71:98:62:01:a1:6f:dd:27:46:a2:e4:39:
99:ca:a5:25:74:70:fb:c7:fb:21:ed:02:bc:05:45:ac:f7:40:
f2:4c:eb:2b:85:8a:ea:52:09:7a:0d:20:74:73:22:09:b1:b3:
c2:30:67:70:9b:ad:7c:86:6b:ba:83:ea:2f:43:cb:90:78:26:
70:f9:f1:92:89:3d:1f:e1:31:93:c0:c1:6a:5d:f0:47:2a:e4:
a2:df:e6:4c:26:50:5b:31:43:29:7d:dd:58:37:42:10:8d:e7:
c8:cb:7f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:54:04 2024 by rpki-client on console-ams.rpki-client.org