Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
File: fKBMxn75bZAi89C_xR6ttKS2PuY.cer (raw, json)
Hash identifier: r6jBdAFpsJyENP81Y1ROJ8O1XPnB1b2DlaWpY/DKxMw=
Subject key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DDF88081E442F4883D6B90BDDF1A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 159.255.40.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:df:88:08:1e:44:2f:48:83:d6:b9:0b:dd:f1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dc:a2:2b:8a:e2:c1:fc:96:3b:16:64:62:e9:
c8:3e:53:5b:e7:f6:9f:87:b1:a3:78:2e:24:e5:fe:
43:9f:6c:8c:74:17:b1:d8:5b:06:b7:24:81:c4:cd:
92:26:b3:92:4d:98:1d:51:58:9c:df:83:91:c0:ac:
59:38:86:c6:c6:c2:b2:10:f6:ca:84:c2:0c:b8:f8:
39:b6:b9:28:7d:09:ba:e7:89:05:1a:54:da:25:67:
52:45:a3:14:7a:59:be:6b:83:d6:7b:82:c3:b7:9e:
e8:5a:da:bd:9e:54:df:5c:c0:5e:f1:51:e1:89:11:
8d:fc:b1:3a:2b:da:90:55:b3:5e:e6:36:97:8c:62:
cb:3c:c6:6f:77:25:16:8f:d7:d0:11:8a:aa:1b:51:
c8:b6:fc:45:6b:21:cb:03:38:37:bb:b0:b9:48:88:
8e:8c:e5:a0:dd:31:00:f2:be:36:8f:59:b5:ad:ad:
3b:3e:f5:dd:0e:cb:97:4f:ed:cb:75:f5:01:86:dd:
83:c2:ac:3c:fe:4a:04:fe:db:b2:00:0c:e0:8e:51:
5a:9d:4a:be:4d:b7:12:7f:a3:75:f9:52:be:3f:41:
7c:83:61:6c:db:e4:de:dd:b1:6c:1f:a5:46:17:9d:
e5:fc:c0:7c:a6:be:43:f8:d2:dd:f1:b2:6f:6f:1a:
ce:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.255.40.0/21
Signature Algorithm: sha256WithRSAEncryption
78:b8:21:d5:42:48:40:e1:b3:48:2f:1f:2b:ee:7a:72:01:74:
6f:35:05:f3:de:de:f0:9e:09:b0:bb:af:4a:58:72:c6:b5:e1:
c2:49:b4:03:48:06:18:b8:ca:00:80:bf:a7:5a:a0:59:df:5b:
42:0f:7a:c6:1f:35:4d:db:07:42:1f:a5:ee:c4:22:f2:1d:e2:
ca:6f:51:02:dc:8c:a2:0e:c2:c5:9e:0f:98:7f:b4:95:29:0f:
41:8f:56:12:43:02:8f:83:93:fa:8c:c5:0a:91:6b:3f:f9:8b:
e4:23:89:9a:c4:f4:0e:99:a1:15:cb:f2:ae:c6:e8:39:8f:18:
f9:0b:7d:c9:20:75:e9:0e:43:69:3d:07:86:6c:ee:13:6a:b1:
6d:ee:86:32:bd:f9:6d:fc:05:96:81:34:23:a6:f8:01:4c:aa:
d9:06:81:62:75:07:2a:f2:e2:27:eb:83:59:b6:3c:86:6c:85:
b5:28:be:7f:f5:9e:31:d5:7c:10:68:ce:7d:cd:02:0f:28:97:
aa:4e:64:4e:1e:05:07:dd:33:fe:a7:0f:6b:c3:f9:83:98:44:
27:d1:12:a4:08:83:0b:d0:66:ca:2f:aa:e7:aa:d2:3b:01:32:
7a:62:2b:02:99:14:8a:dd:a2:03:15:17:eb:96:47:56:4a:d1:
80:44:fd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:07:30 2024 by rpki-client on console-ams.rpki-client.org