Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hZJ6kyg9Ys5nLvofm-9XojVhGKo.cer
File: hZJ6kyg9Ys5nLvofm-9XojVhGKo.cer (raw, json)
Hash identifier: 4CqxoZqXbjIzTppgRiHdzvzbMlzTxpH4D4ck/D+uqyk=
Subject key identifier: 85:92:7A:93:28:3D:62:CE:67:2E:FA:1F:9B:EF:57:A2:35:61:18:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAB4B2F6A4D0654ACEE109CF3E9E60
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/hZJ6kyg9Ys5nLvofm-9XojVhGKo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.31.64.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b4:b2:f6:a4:d0:65:4a:ce:e1:09:cf:3e:9e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85927a93283d62ce672efa1f9bef57a2356118aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:85:20:74:bf:8e:ae:51:d9:57:a6:7b:17:
81:17:a4:30:d9:8e:e9:63:b5:bb:4f:95:64:f8:da:
a3:58:0b:88:95:77:af:b5:f8:12:a8:50:11:00:c5:
63:e7:60:dc:49:9f:65:d3:6d:4a:f2:6e:ce:9f:bf:
fa:85:c2:53:ea:89:ff:80:8f:6d:8a:df:99:64:6f:
be:d4:ca:79:1b:49:f8:f1:0e:1c:d8:5c:69:12:a0:
38:25:0e:95:5d:c6:fd:e8:c7:07:29:16:7e:6e:47:
39:7c:e6:ac:c8:97:9a:16:c8:1f:69:68:8c:08:f5:
8b:cd:e7:c0:43:9e:bb:ea:1a:fd:16:e1:c1:57:f4:
14:b3:fd:94:b9:a7:1b:0f:32:94:8b:21:08:59:53:
82:8a:e2:1d:64:99:5e:d1:99:b6:cd:22:25:ea:1b:
54:fd:a7:08:e8:ab:cc:37:7a:6a:6b:b5:1c:84:a3:
44:de:f6:09:6c:5a:ce:8d:ca:d1:b4:bf:93:24:77:
a7:d4:21:c2:2a:6b:3d:b9:4b:0b:f7:dc:60:da:38:
76:3b:39:a4:3e:4e:ac:b7:85:ce:94:7f:fa:1b:c5:
0c:1c:9f:e7:22:c6:07:b1:35:01:73:1e:be:b3:5f:
95:84:d4:1f:05:d8:2f:4c:03:3a:15:e5:30:a8:2b:
08:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:92:7A:93:28:3D:62:CE:67:2E:FA:1F:9B:EF:57:A2:35:61:18:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/hZJ6kyg9Ys5nLvofm-9XojVhGKo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.64.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:db:77:2b:38:18:22:c6:1a:0b:61:b1:6c:f3:7d:62:3e:76:
bc:31:8e:9d:3c:b8:77:7d:e6:1d:ac:3f:6d:03:3c:c3:c4:50:
a3:a2:0d:92:c5:d9:35:1e:27:35:46:39:e3:5c:4d:ad:26:a8:
fb:55:99:8c:f2:6c:d7:85:bd:70:37:25:54:9e:f9:2e:35:43:
ad:59:42:ce:b6:03:ef:b3:a4:28:f6:a8:b8:f2:09:8f:32:71:
de:81:6f:42:2a:86:83:a2:a8:68:bc:2c:99:7b:27:dd:12:94:
39:8d:2c:f8:f0:97:31:94:ec:7c:81:f4:70:3f:c0:ff:bc:38:
f8:cd:c3:0b:aa:bd:65:64:57:2c:d0:e1:3e:63:6a:ad:c4:ae:
a0:ae:85:80:9a:61:4d:29:18:74:0e:6e:de:2b:a4:74:8f:bd:
fc:9e:58:d9:2e:ed:4e:87:b3:9d:74:13:0f:95:38:9f:e5:c3:
58:8e:b0:67:7e:9d:2f:aa:55:39:07:41:9d:8e:a0:ad:78:f2:
b9:3f:47:13:29:8b:07:cc:38:c6:73:d5:66:ae:c4:3c:52:18:
d3:e0:69:37:c0:78:25:2e:ac:4b:95:b6:99:e0:d9:7d:c4:7f:
bc:6e:e0:4b:66:66:14:89:98:23:85:89:21:61:2e:58:f9:e2:
b4:e6:ff:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:36:24 2024 by rpki-client on console-fra.rpki-client.org