Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f-M2aJct_7fshiiujDwmvt4cq5o.cer
File: f-M2aJct_7fshiiujDwmvt4cq5o.cer (raw, json)
Hash identifier: c/S5Z/Li9rL97akX2qdZmRr2WqnXPwMAB/sz4eKtlRs=
Subject key identifier: 7F:E3:36:68:97:2D:FF:B7:EC:86:28:AE:8C:3C:26:BE:DE:1C:AB:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8B8CE357FCF99AA773D26C4FE8ED8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/f-M2aJct_7fshiiujDwmvt4cq5o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51465
AS: 59460
IP: 91.241.32.0/22
IP: 185.135.192.0/22
IP: 194.146.4.0/22
IP: 2a06:51c0::/29
IP: 2a0d:9540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:b8:ce:35:7f:cf:99:aa:77:3d:26:c4:fe:8e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fe33668972dffb7ec8628ae8c3c26bede1cab9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:94:55:f9:5b:ae:b1:1e:d0:de:7d:63:01:
60:8b:4c:86:c7:2a:84:f3:26:9f:07:ae:d7:65:61:
c8:3e:99:54:ec:a2:7a:02:e9:74:0d:13:48:8b:bf:
29:3f:29:13:29:f2:04:b9:50:f1:b0:54:73:cd:04:
a1:b7:1c:a0:72:be:4f:49:eb:e1:8c:83:fb:15:bf:
cd:90:91:0f:03:78:df:f6:20:50:13:d0:48:99:db:
01:fe:18:51:a3:11:3d:b7:a9:0c:43:4b:80:27:48:
9b:67:3a:07:d8:2b:c9:bf:f4:ff:da:e8:2d:df:c6:
ec:8e:6a:49:c9:19:9f:62:1a:9f:8c:e6:d6:16:78:
9c:00:b5:ea:51:2f:a2:24:cb:51:36:24:c2:97:98:
00:9e:77:7d:38:0e:14:9c:a5:55:fe:66:c8:b5:15:
30:e4:03:aa:56:8e:4d:57:05:c4:bb:ed:a2:0c:2d:
60:bf:be:3a:46:17:32:15:ab:ce:90:2a:e8:aa:3a:
9f:57:e9:3a:ad:71:31:9b:9e:ed:02:4b:b9:ab:f3:
e1:24:e4:bf:f6:41:63:f0:00:48:57:b1:52:db:cf:
fa:36:a1:25:0c:26:b7:e4:06:2d:65:c9:74:11:dd:
26:5b:ee:95:84:d3:24:b3:12:50:d2:25:22:1b:2d:
9b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E3:36:68:97:2D:FF:B7:EC:86:28:AE:8C:3C:26:BE:DE:1C:AB:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/f-M2aJct_7fshiiujDwmvt4cq5o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.32.0/22
185.135.192.0/22
194.146.4.0/22
IPv6:
2a06:51c0::/29
2a0d:9540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51465
59460
Signature Algorithm: sha256WithRSAEncryption
1f:43:17:1d:0b:34:d1:e1:2a:b9:0d:6f:81:d5:99:b2:d9:ae:
ea:d0:bc:f0:89:6b:9f:5d:99:d5:86:4c:f7:8e:f5:7f:03:d9:
d3:62:51:4a:1c:cf:07:f6:b1:d9:21:71:01:a8:69:ba:c5:66:
47:0b:b2:a4:61:cc:97:77:c0:a8:d2:e6:34:09:ad:2f:d0:e2:
e5:68:b8:ef:03:c9:c7:b7:47:24:ed:df:c4:18:71:d4:0e:14:
dd:c5:95:60:48:2f:4c:9b:53:0c:2c:65:74:9a:81:fd:fb:03:
3d:e1:e1:2a:36:db:ee:83:46:de:4d:be:a0:87:3f:9e:5b:81:
e4:28:5c:bf:33:95:06:87:c4:ef:d9:cf:42:5c:ae:c3:e2:d4:
f2:6c:1f:1d:c7:13:26:7e:36:70:43:bc:3e:bd:46:ac:96:8f:
54:bf:f8:16:0f:7d:23:12:fe:5c:95:8c:29:0f:f0:f7:1a:39:
f0:2f:d7:87:29:05:2e:27:b4:cb:68:35:95:42:b9:bd:53:ba:
35:a6:0f:53:df:43:3d:3a:03:46:4f:74:e0:78:89:ff:50:75:
c9:f6:d9:f4:dc:52:9a:d4:c4:20:55:a2:b1:97:d1:48:2d:25:
8c:77:11:2a:25:44:93:9f:c3:c1:1b:fc:00:c9:b5:88:85:84:
7f:cc:07:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:48:34 2024 by rpki-client on console-fra.rpki-client.org