Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
File: fz4IdInuI6lCTVP6whbuS44BKA4.cer (raw, json)
Hash identifier: lU6H9nUqEeULZwVW1owAV9trYT0z9pgXSX42HMADZiI=
Subject key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72742644447989C580787AF843E3672
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.5.58.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:42:64:44:47:98:9c:58:07:87:af:84:3e:36:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3b:f6:b3:f0:a2:1d:ed:71:d8:f1:aa:d4:31:
90:4f:4e:b2:a2:dd:7b:ee:21:66:28:48:cd:f5:55:
99:75:1c:36:73:b6:f0:91:74:a6:f8:3f:e8:4d:46:
5b:f6:ce:7e:9e:6e:99:b4:0c:44:a1:bc:1b:b4:6b:
8d:60:26:32:fc:45:77:04:74:ca:84:7b:58:6b:3f:
19:96:e5:53:b4:88:f2:36:d2:9d:f5:e2:e1:b2:56:
b2:4a:c3:51:f6:64:56:53:7f:08:87:19:1e:4f:85:
c6:fd:42:57:42:78:63:2d:23:6f:83:44:f3:0a:3c:
6b:66:d3:a5:2d:c6:17:d6:37:ed:22:c1:db:73:68:
6c:60:42:d1:03:5d:fc:6f:70:40:5e:77:3c:dd:6e:
5c:73:74:a7:6b:65:3e:b4:e8:df:30:ce:ca:6b:47:
05:35:e4:e3:d1:c2:cb:21:49:ef:bc:21:8c:3e:67:
48:ac:ca:c4:99:30:db:5f:b5:34:af:08:06:b0:bb:
5b:31:03:bc:c5:b7:bf:1d:86:37:2f:26:4c:b3:2c:
7c:98:9e:13:55:3e:ff:65:1f:16:3a:86:4f:64:94:
53:00:1e:cf:2a:b4:8c:74:01:d4:0f:0b:f5:34:03:
fd:c7:6a:ed:e4:0d:8e:cd:ca:5f:36:56:5b:d0:a6:
c4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.58.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:5f:99:dd:75:bc:78:b8:a1:a8:19:be:91:95:8c:98:0c:ef:
90:e3:38:fd:8e:8f:b1:aa:7d:cd:a3:58:9f:7d:91:f3:e9:99:
f5:78:9e:4c:8f:d8:33:bf:c3:a5:b8:4a:51:b4:46:f4:c4:f2:
47:51:84:51:f3:ad:16:ed:4d:96:64:0d:79:27:09:21:c7:40:
20:f9:8a:93:37:ee:f7:15:59:04:71:6f:33:d5:a7:c1:8e:3b:
9c:fb:1e:2a:da:61:ca:fb:45:d8:14:ec:7d:e4:5a:e2:a5:6a:
f3:db:dd:fe:f6:21:87:65:eb:ca:dc:f9:2e:b2:b4:d6:b7:81:
64:1d:6a:93:a8:d1:21:99:58:5e:1a:d8:0c:3b:b9:ab:5b:3e:
57:d0:94:49:b9:4d:7b:c1:c1:01:e5:7a:c6:16:bd:b7:98:bd:
6f:ec:81:60:e2:57:18:3e:a1:ad:f2:2d:31:72:8a:c9:07:a3:
a3:5e:59:ec:10:18:a5:32:d3:7c:82:11:69:36:86:51:72:00:
b3:15:11:cf:03:a0:11:27:ae:d0:bb:21:5b:30:8b:88:c9:97:
68:dc:bd:a8:7c:0a:35:9e:93:38:4f:50:68:ca:a9:53:94:12:
89:64:e9:36:98:c0:7e:12:b1:70:4b:fa:18:8b:3b:45:33:eb:
6b:6c:d4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:31:42 2024 by rpki-client on console-ams.rpki-client.org