Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
File: fF39tuHZPAkoI96WvdfIi7w2odE.cer (raw, json)
Hash identifier: miOr4lRmTL/9DOkRrC1C3Jc0QQ9RWrxCxR7qEPuJCo8=
Subject key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B12569C6AA8A9A54B774FCC89FD89
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.246.88.0/22
IP: 2a10:2040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:12:56:9c:6a:a8:a9:a5:4b:77:4f:cc:89:fd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:a3:a9:74:68:d2:8a:5c:96:2e:98:bf:23:
87:30:e7:75:35:71:b0:8d:89:10:16:f6:8f:3c:c7:
98:1f:9a:84:dc:35:7a:98:ce:4f:65:c1:24:90:7f:
d2:74:fb:6d:a6:ae:d7:c8:29:26:2e:b5:d4:eb:01:
15:e6:42:8d:9c:a5:7f:3e:1d:0e:4c:ae:cc:23:45:
8b:02:f3:bc:8b:cf:d8:37:09:33:54:e9:f0:8d:68:
18:98:9f:25:3d:2c:1a:71:6a:6b:22:00:c3:10:09:
c1:7f:8a:6a:17:5f:95:3d:69:0b:d6:7a:40:4a:9d:
3b:aa:65:ff:0a:b2:b0:00:14:da:c4:79:32:92:69:
9c:5f:d4:4c:7c:cf:66:3d:be:2e:51:2a:fa:50:30:
cd:7d:60:ab:c6:0b:a0:65:f0:d7:c5:eb:a2:63:d8:
c7:45:02:84:30:0f:4e:e7:2a:78:30:65:81:e3:f3:
93:73:e8:bb:49:06:71:89:42:a3:d0:7a:25:1a:eb:
5f:32:3b:9a:ae:3f:fb:36:93:bc:4e:86:ca:70:e9:
a5:7c:d8:6b:4b:36:f5:1b:a0:a9:a9:d6:d3:6a:10:
db:fb:8f:3f:aa:8f:fe:b7:97:a3:be:70:1a:19:34:
93:fe:85:3a:25:5d:43:f9:f0:7f:8b:03:08:7b:af:
a4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.88.0/22
IPv6:
2a10:2040::/29
Signature Algorithm: sha256WithRSAEncryption
51:04:6e:9a:72:e1:a6:62:75:3a:8f:3c:e7:43:84:d2:89:8f:
75:5b:44:1d:6b:63:9e:68:01:c6:91:22:f8:ec:c6:4f:36:8a:
a4:d1:c0:c9:fa:e7:a0:a6:82:7a:72:ea:77:d7:b7:19:6a:14:
bd:e6:f8:c6:e3:8a:da:cd:7a:15:fc:5e:74:84:18:96:39:70:
30:3d:ce:25:d9:80:a4:f3:86:ed:54:88:da:7c:6f:ee:21:09:
4d:34:6e:07:4e:b3:f6:81:8e:f9:1d:0f:6e:6c:c1:81:fd:1c:
68:fa:d3:91:fa:a9:af:53:78:4b:13:55:0c:ad:f1:42:49:94:
b4:bf:4b:25:08:2a:e2:c1:9b:4f:a6:f9:d3:9e:ad:29:d5:16:
b5:75:ed:83:c1:00:b7:6b:ad:03:e5:df:0b:43:c7:80:aa:71:
fd:45:6a:05:a7:e1:24:98:c5:bf:39:ce:ed:65:1e:76:14:25:
65:90:78:a9:35:d4:ed:28:14:37:4f:94:2d:6f:64:2b:96:6f:
df:15:c8:a3:a6:76:d1:b5:31:4a:00:2e:f6:78:81:99:46:5a:
db:69:5e:ba:15:be:0c:e8:cb:05:ca:56:2d:0a:3c:89:5b:d5:
af:fc:54:f0:9a:cc:8e:88:9c:fb:5a:c2:8b:10:27:6c:ab:3a:
45:02:33:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:07:43 2024 by rpki-client on console-ams.rpki-client.org