Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
File: h7l24qq5IySO6A7lfL00rYe87zQ.cer (raw, json)
Hash identifier: z8KDoz0HfFSsu0Ys40nOWtHwfRAFe7YaybR4VcVKNwE=
Subject key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DCAB09B437B02DFA0ECFCA8E9F42E1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.88.248.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:ab:09:b4:37:b0:2d:fa:0e:cf:ca:8e:9f:42:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b3:5c:3a:5f:bd:da:80:b1:01:22:ab:c2:f4:
07:e0:a7:38:0f:3b:32:7e:65:86:62:3c:c9:58:2d:
83:1d:5d:e5:51:23:25:64:f3:c5:e3:4f:40:1e:0f:
c8:ab:fb:32:41:c2:60:07:89:f7:a7:ca:d0:13:39:
60:7c:6b:e8:b6:02:61:f2:f0:eb:b6:39:65:4f:21:
0f:ea:33:1e:9f:27:da:a8:05:b3:b6:bb:48:96:42:
b7:df:fc:32:f6:e1:c4:83:ca:62:f1:09:9c:5d:d6:
a3:9c:2e:d4:fb:7d:91:84:9c:31:63:00:ce:dc:55:
bd:04:9e:0e:ba:d8:5d:71:43:86:b0:75:52:d6:45:
d5:a5:d3:3e:53:f9:bc:97:2a:32:56:bc:a3:80:19:
a4:8b:bd:7c:6a:b5:0f:c5:d7:b9:8b:27:36:00:f0:
08:52:bd:5c:3e:b2:86:9f:76:90:8f:33:19:ce:c0:
76:a0:58:d5:32:0a:a1:fd:37:0e:2a:f5:34:76:9e:
50:4e:6d:06:ec:c5:2e:c6:0a:79:ec:95:db:27:0a:
70:03:5c:18:a0:e2:d9:2a:42:98:84:d2:c5:17:c5:
33:3d:38:31:a0:6d:ca:1e:c8:00:3c:d8:34:d3:7e:
88:9b:78:49:89:ed:f0:15:82:34:d6:97:a6:57:8a:
70:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.248.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:e3:37:51:13:75:bb:9c:2b:30:a7:af:2f:fc:38:e7:fb:17:
f0:01:1d:e5:af:e2:b9:a8:9a:93:67:c0:49:93:ea:db:cf:89:
fe:7e:df:e7:f9:25:7e:ee:62:7a:e6:8a:b8:72:8f:43:99:9b:
0e:8f:1b:ff:71:11:00:8a:54:d0:b6:ac:f1:24:6d:01:c6:ee:
9f:ec:78:18:92:68:1b:0a:99:1a:4d:f9:c6:8e:46:c3:20:a6:
76:66:3e:56:01:70:9f:f2:44:a5:d6:5d:fd:15:8f:61:6d:93:
19:e1:6d:e2:d8:94:3f:7e:8b:c1:68:2b:51:59:90:f7:5a:5d:
0d:cd:52:77:e4:03:53:37:f8:4e:de:7b:90:51:ec:fe:18:aa:
39:50:98:60:53:dd:37:d6:c9:b4:5f:99:f1:0e:a2:54:5a:e6:
3f:5f:39:c4:d9:a1:03:fe:1d:e0:ee:2c:b0:25:52:be:bd:89:
27:0d:31:15:0d:af:a1:b9:86:8b:0e:67:94:cb:e2:99:1b:df:
6d:d2:3b:0c:ee:95:bb:44:be:81:a8:06:09:05:db:b5:96:a9:
59:df:c6:9d:ba:4c:9b:98:10:83:8b:55:03:97:d3:51:66:92:
ec:68:cb:02:a2:a5:93:77:22:6a:99:24:0b:f2:91:5a:5a:a0:
48:70:41:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:57:50 2024 by rpki-client on console-ams.rpki-client.org