Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
File: flrIG7zPhS8irI7VLS6S2zHY1gY.cer (raw, json)
Hash identifier: ZiTmZXu8rQ1vN203MdTI8WCy4A26Ej0thWIyxfotDxc=
Subject key identifier: 7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190FE4E0FF8CCC550971F3BCBF8B02B7C7C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 29 Jul 2024 11:44:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.149.240.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fe:4e:0f:f8:cc:c5:50:97:1f:3b:cb:f8:b0:2b:7c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 29 11:44:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:eb:22:f7:68:30:ab:fc:04:b1:e5:fd:4d:7d:
f3:d8:69:6f:a9:4a:0e:56:26:a8:9c:3f:ea:d6:68:
af:93:1e:cf:49:c9:5c:d2:78:4a:cb:d9:46:73:05:
e9:c4:2e:19:6a:97:95:64:46:e0:e7:72:e7:4f:3e:
cf:57:95:03:18:00:e1:ea:72:94:6c:a8:bc:7e:42:
0b:bb:fd:98:fa:02:fe:65:88:a6:fb:da:82:40:5b:
19:06:4f:8b:ab:8f:8a:ef:b7:57:b7:d1:3b:cd:da:
b4:aa:a0:9b:78:a1:f4:83:72:4b:8f:7f:09:39:40:
ad:39:87:a6:3c:70:c9:09:e3:49:78:42:cc:77:a0:
2e:64:28:a8:72:8a:2c:0e:7e:f3:8c:28:e4:20:b8:
81:01:a1:ae:83:f5:c1:a0:75:ec:ef:bf:94:88:dc:
65:16:66:2a:86:b9:bf:44:54:01:3d:54:85:af:1b:
27:a4:9b:61:5b:4b:12:64:d7:eb:ce:19:88:08:8e:
ce:f1:69:1d:77:cc:83:68:e6:f4:35:c6:79:a6:3c:
7f:d9:59:fc:c9:ac:a0:ed:fa:2e:e2:47:93:36:ca:
e0:9e:71:55:4f:fe:ff:0d:95:f3:82:d1:b3:ee:d2:
62:98:74:ad:5e:9e:03:d0:f7:58:ec:77:15:f7:a9:
3d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.240.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:81:b6:7a:0f:05:bd:c9:1d:a8:e0:72:03:69:eb:8c:63:0d:
b7:89:77:7e:3a:c8:de:af:9a:80:43:9b:e7:b8:62:de:92:25:
73:dc:c8:b6:1f:c3:57:dc:41:4e:50:1d:b7:36:09:3a:fe:67:
d0:f2:02:82:91:b1:9e:6e:39:63:2d:57:06:05:a5:a2:a0:4d:
13:f7:e4:84:74:97:5e:2a:a1:ca:53:3a:0d:28:46:19:a4:67:
9a:d2:85:69:ff:4f:b1:25:68:62:8b:d1:73:bc:57:ca:6b:05:
17:4d:99:e3:e3:75:5e:fc:40:64:22:04:50:9d:75:11:b9:99:
22:ca:d3:99:f2:63:e5:5e:55:e9:79:7b:c5:e7:6a:5d:a6:21:
a2:cf:03:e6:52:6c:bc:0c:c7:12:25:3b:d6:e7:89:52:91:0b:
b8:8d:cb:c3:85:1f:70:f5:93:32:cd:7f:ca:29:42:f8:de:6e:
1e:9e:05:46:90:d1:84:56:e2:aa:25:27:ed:ea:60:67:dc:bf:
cf:b0:b4:4f:98:68:e4:6a:cd:eb:25:09:e7:54:a1:f1:9b:84:
ed:da:43:45:b3:bd:e1:f9:47:46:e7:d6:fd:68:d1:95:65:62:
65:f3:97:4a:97:38:c6:86:93:1b:6e:8f:c4:a4:86:58:af:cd:
7f:82:0c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:28:11 2024 by rpki-client on console-ams.rpki-client.org