Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
File: f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer (raw, json)
Hash identifier: B+/tv7G8JXIMUor48EQWoyBm21htDEwgYsHjmnz+uu4=
Subject key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7954991D1BEA53DD437E5835AE756C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 192.76.242.0/24
IP: 192.92.149.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:49:91:d1:be:a5:3d:d4:37:e5:83:5a:e7:56:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:b6:42:46:2f:7b:5e:76:49:7a:de:74:14:
8d:f8:e3:76:9f:c9:cd:df:55:ca:3b:ee:09:6a:c3:
9e:78:1c:73:3b:52:0e:fd:a2:a6:01:de:5b:de:cd:
6b:4e:1c:99:ec:10:78:24:91:00:9b:0d:48:7b:4b:
39:c3:60:6b:4b:22:dc:b7:ac:a1:59:c2:f1:51:3e:
f2:fa:4b:2d:07:b9:bd:a8:d0:a2:2d:dd:5f:25:7a:
25:a9:5a:e8:da:d7:f5:e6:62:08:36:6b:6c:3e:4d:
b3:3e:02:5a:8b:3d:24:ef:ff:61:dd:fa:12:73:9f:
66:f7:65:b7:94:b9:81:fe:38:4d:ab:52:29:92:1a:
7a:e4:d4:2f:ce:41:70:3a:a8:e5:dd:0d:f0:1f:4b:
d1:cc:d6:85:f1:d1:a2:f7:d5:0c:7b:16:a6:20:26:
f1:5c:bd:0d:cb:c9:d8:10:1d:a3:2c:b5:e2:23:34:
3e:ba:86:66:1d:b6:96:9f:59:77:d5:d5:26:67:15:
c1:10:cd:27:be:87:8a:05:54:3b:16:63:e7:37:2f:
25:b3:57:b2:be:5d:2e:68:e6:39:18:51:13:e9:5e:
a7:64:6a:2d:37:12:ad:05:4f:93:83:c6:88:e6:88:
ad:7e:57:7d:0c:8d:d3:35:32:04:6f:81:fb:31:d1:
b3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.76.242.0/24
192.92.149.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:18:e2:7f:bc:85:30:1c:f4:7f:dc:1d:39:7a:23:fb:f2:70:
9d:01:98:a4:01:ec:fb:71:69:19:46:e4:86:0b:60:95:d1:f3:
5c:2a:cd:10:9b:8b:7c:79:df:2c:23:15:69:cf:29:ff:ae:7b:
97:2d:cb:3c:8d:87:db:5a:56:b5:6e:a2:62:e4:75:40:a0:a9:
0f:2e:04:19:7e:04:b2:d1:80:a7:f2:d4:07:2f:94:ca:f4:ea:
53:83:ad:99:1a:26:dd:63:99:17:1a:59:d5:98:00:06:b6:e8:
20:04:f7:04:ba:1e:3b:d4:ca:31:4a:ac:32:dc:3c:be:7e:6c:
17:d2:0d:71:9f:4b:21:26:2f:10:19:62:c5:b0:e5:23:28:91:
de:9e:bd:aa:c1:b0:e8:97:4e:04:85:19:ea:42:20:0b:c5:74:
00:93:1c:1b:29:86:b9:4c:cb:8a:29:d9:0c:c1:bc:5f:30:6d:
1f:77:74:d2:31:fe:33:68:fd:16:ff:71:b7:b5:a4:9f:fb:ce:
ac:cb:68:8d:b0:37:93:63:10:f3:61:a3:0e:76:31:14:09:33:
90:18:10:72:8d:2e:3b:f8:e5:ab:fe:9e:c6:40:ac:26:17:5d:
22:d7:4f:72:5f:1d:dd:66:00:77:50:7c:b7:f2:46:75:2d:4b:
df:86:66:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:22:40 2024 by rpki-client on console-ams.rpki-client.org