Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
File: fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer (raw, json)
Hash identifier: 3t5UiDfFhYVRsp5s5sgCUBC4wbXUg44fCJ/pKBm6DWI=
Subject key identifier: 7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBF35FFF7DFE5FB18404B78DD2D204
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 46.243.254.0/24
IP: 91.223.137.0/24
IP: 178.170.217.0/24
IP: 2a03:5a00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f3:5f:ff:7d:fe:5f:b1:84:04:b7:8d:d2:d2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:6c:70:76:24:a1:ce:13:66:59:ee:75:a5:
b0:6a:3c:d0:48:a4:34:74:6d:93:0f:87:be:9a:46:
93:be:b5:f4:1a:c7:03:be:e3:c4:22:be:3d:e3:24:
4a:98:09:fa:a8:ba:87:3d:1c:b8:1b:58:56:bb:ed:
7b:98:38:9a:b4:6a:ea:f0:f4:b1:a0:31:da:5c:5c:
10:e8:74:b3:7e:ca:9c:ff:a0:52:52:b9:dc:65:f2:
00:29:46:88:f9:7b:f5:c9:67:f6:74:71:d4:07:a5:
ad:25:61:78:38:c9:2f:f7:cf:60:8d:59:88:91:46:
f6:17:fa:7b:50:c5:e6:55:5e:27:8c:83:d9:45:e2:
dc:df:5c:26:49:09:be:d8:00:ab:9f:ac:92:ff:de:
6c:61:17:52:8c:ad:31:b3:57:01:d0:0a:2b:32:e1:
61:b5:f4:6d:1e:d2:df:98:c8:6a:b4:22:0b:88:09:
34:13:d5:8d:bd:c0:51:bf:fc:b7:34:a2:90:73:8d:
23:df:bb:d0:cd:9b:60:25:43:95:05:e8:f5:f1:8f:
7a:06:bd:13:bc:76:b9:19:19:3c:e5:02:29:ae:68:
ad:f7:08:6b:92:7f:d9:8b:5a:aa:39:66:51:dd:b2:
fa:43:75:ad:35:03:da:02:73:5f:1e:4d:7b:56:19:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.254.0/24
91.223.137.0/24
178.170.217.0/24
IPv6:
2a03:5a00::/29
Signature Algorithm: sha256WithRSAEncryption
6e:79:10:55:cf:f9:ea:5a:d2:d9:d5:a4:dc:6b:55:c8:36:f2:
85:59:03:92:41:3e:a7:6e:cd:58:61:bb:eb:4b:37:06:ac:e5:
0e:be:61:51:47:9a:6b:c0:85:ea:1a:97:1a:50:bf:f3:c6:54:
d4:01:ea:b8:cf:52:1d:87:a7:b9:f7:7e:94:83:bb:e0:ec:d0:
58:e4:b3:c5:1a:b2:8e:52:4d:f7:42:1b:bf:5e:ad:68:50:71:
69:e7:d1:ec:95:3b:ea:70:40:ca:f7:d4:62:f2:48:96:4f:c5:
29:2d:a6:4b:0b:2b:60:e8:3a:5a:2e:67:84:7e:5b:0a:14:d6:
59:2f:dc:f1:55:10:e2:9f:d8:e5:8b:a9:b3:a5:ba:a1:2d:8d:
ae:46:c3:98:71:f0:d5:a1:f5:7c:26:04:b2:11:9b:0c:46:c8:
59:a4:4b:14:a6:c5:36:96:48:37:eb:d5:a4:69:9c:55:72:b7:
a5:f3:0b:1d:7f:79:bb:da:38:eb:01:fb:d9:56:dc:0a:36:d0:
5c:f5:a4:d6:f7:ea:5d:16:93:50:e8:86:5a:d3:bc:91:b6:ba:
b3:2e:c9:94:c1:54:08:3a:a8:02:81:95:d9:6b:73:3f:44:fc:
7b:46:a3:3f:05:54:5a:e2:28:68:4b:f8:0b:ac:0a:af:c6:66:
dc:bf:14:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:34:42 2024 by rpki-client on console-fra.rpki-client.org