Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fPWJoxF0uISmT9CRrVwsulVFu9w.cer
File: fPWJoxF0uISmT9CRrVwsulVFu9w.cer (raw, json)
Hash identifier: OkgKT+yzu+k3Y+9/9weY0IHGbgB0FIf3cCol+qc5sHs=
Subject key identifier: 7C:F5:89:A3:11:74:B8:84:A6:4F:D0:91:AD:5C:2C:BA:55:45:BB:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DE28E71A43009069836FCBA825673
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/c8d54b-e586-4595-93e2-868babc6dd32/1/fPWJoxF0uISmT9CRrVwsulVFu9w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/c8d54b-e586-4595-93e2-868babc6dd32/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.64.125.0/24
IP: 2a14:2f00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e2:8e:71:a4:30:09:06:98:36:fc:ba:82:56:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cf589a31174b884a64fd091ad5c2cba5545bbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:a5:ac:1b:70:92:39:ff:52:ca:a5:79:5d:
00:a7:a9:0e:1f:88:00:38:6a:68:4f:0b:27:a1:6f:
a9:d7:5b:dc:e5:3e:8d:7a:f1:53:60:c8:f6:3d:47:
d3:cb:37:3c:25:4c:6f:d0:bf:65:88:d5:1c:ab:55:
3d:f3:e3:a4:e0:6a:fd:7d:36:59:9a:32:eb:00:24:
b0:73:89:19:ee:7c:0b:bc:0b:7f:59:68:79:d4:b6:
6e:82:c5:93:55:51:cf:88:e9:b4:42:4e:64:5b:b7:
01:43:e9:d3:77:9a:ec:6e:b5:22:e6:87:93:83:d5:
4b:d8:19:39:8f:30:bb:f9:f1:d8:4b:c8:e5:fd:e3:
cf:a7:82:ce:84:4f:d2:3b:67:55:58:5c:7d:68:9c:
56:2e:c3:44:f1:2d:c9:74:04:a4:1c:5d:5f:e0:94:
eb:26:8b:99:c5:67:9e:72:de:96:3f:f2:e9:57:d1:
0f:3a:59:bd:f8:07:c6:90:fd:3c:e2:ab:09:be:a6:
bb:17:71:47:5c:03:bf:d1:82:58:72:7c:60:7e:41:
80:48:24:e6:80:5a:76:cb:8e:80:2e:bb:d4:86:1c:
48:7d:cf:e6:01:4f:ef:4f:1c:a3:12:a0:27:9b:11:
31:eb:d8:f4:01:a5:cf:fe:a1:ec:27:cc:14:ca:c4:
e2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F5:89:A3:11:74:B8:84:A6:4F:D0:91:AD:5C:2C:BA:55:45:BB:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c8d54b-e586-4595-93e2-868babc6dd32/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c8d54b-e586-4595-93e2-868babc6dd32/1/fPWJoxF0uISmT9CRrVwsulVFu9w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.125.0/24
IPv6:
2a14:2f00::/29
Signature Algorithm: sha256WithRSAEncryption
07:f0:97:3e:50:04:4b:66:4b:05:9e:88:1d:23:ed:b9:c4:a5:
74:bd:dd:ce:11:71:4c:b4:bc:11:7a:04:bd:e9:ef:fb:3a:0a:
40:cf:49:e1:d9:88:f3:49:55:3a:84:c0:cb:7b:1c:2c:85:c9:
10:65:c0:ff:cd:93:19:47:3a:86:2b:48:1f:60:42:e4:b0:4e:
29:b3:72:db:3b:66:c6:09:10:47:cb:65:ef:90:10:0d:90:23:
37:6e:9b:8c:44:97:e4:d7:5e:cc:37:37:9d:10:50:de:cd:81:
17:b5:fd:e1:13:00:56:21:6c:57:86:10:0f:fd:0d:41:2a:3f:
3a:60:3b:9a:ce:47:70:56:2f:ab:f4:87:19:ce:8a:07:bc:d3:
8a:0b:cd:5a:71:59:e1:8e:bf:d2:02:78:fe:9b:38:67:4c:d6:
49:cc:a8:1a:65:db:5c:4a:82:0e:1e:68:62:42:ea:cc:23:c7:
7d:08:48:6e:02:87:9a:5a:ea:82:bf:2a:93:0d:9a:58:a2:b0:
19:1d:16:3a:d2:70:8e:c7:eb:de:35:f4:fc:c0:74:d6:6a:c3:
80:1d:a5:0f:db:b5:d2:0b:43:ee:2e:d9:1d:ca:e0:d2:db:3d:
26:0e:52:cc:b4:9b:6b:88:78:b6:0e:65:94:36:0c:e7:83:de:
14:6c:55:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 19:05:01 2024 by rpki-client on console-ams.rpki-client.org