Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
File: i5LFXos1lQd133Y-dJMNUinJ-gA.cer (raw, json)
Hash identifier: tV114kGtu+Ih16uKr3iWSAKsCYELkDGyM3pCCRFJgP4=
Subject key identifier: 8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BBC09D770B6D888B61AE57BA2BE39C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.93.112.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:c0:9d:77:0b:6d:88:8b:61:ae:57:ba:2b:e3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b92c55e8b35950775df763e74930d5229c9fa00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b6:26:93:dc:c8:38:e7:06:f9:fc:29:b0:ae:
06:3c:a9:f9:e2:cc:2b:dc:23:51:07:06:20:28:22:
91:05:71:1f:39:a1:62:da:6a:06:c5:8a:fe:91:dd:
1b:ad:d0:46:c3:c8:b4:3c:bb:15:c2:21:b6:8f:27:
de:5f:94:c9:9c:cf:6a:37:28:b0:df:77:aa:b6:3d:
a2:37:7d:1e:11:1b:5b:8e:3f:bb:43:9f:c7:5f:ec:
3c:78:c3:b5:10:27:fd:43:05:25:8c:93:07:b7:80:
b7:f9:15:da:92:cf:ac:57:e8:64:87:42:be:f4:75:
ad:41:c9:3d:ac:55:e9:3f:9d:af:51:96:56:fe:f8:
14:d8:f7:dc:77:99:6a:65:f8:88:cf:35:38:4d:47:
e4:6b:a0:b6:7a:73:8b:3d:4b:47:31:46:37:f8:f3:
a9:d8:00:4c:e6:a4:02:6f:12:ab:3c:a1:f3:2a:7f:
76:6f:60:ef:e5:d8:52:db:00:c7:62:5c:1e:b2:ff:
db:49:5e:1e:0c:0e:b5:7a:91:4f:50:3d:ba:2e:7a:
9f:cd:ea:9d:59:47:32:87:fb:50:db:98:37:ac:70:
7f:61:b4:36:16:4d:ea:0e:17:e3:21:60:d4:30:b2:
54:a6:29:32:e3:72:68:b1:c9:77:59:a1:24:8f:18:
d8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.112.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:57:55:86:69:b6:a7:5a:a5:70:82:b2:28:14:b8:ab:ae:70:
d4:e4:23:85:19:b4:e8:b5:26:5b:a8:e2:26:4a:8e:ab:87:03:
c3:32:27:9e:38:50:ff:31:bf:aa:38:e0:52:6c:0e:e1:79:e3:
e4:65:4b:f8:0e:2e:06:04:d1:86:91:e8:42:d5:f3:ea:a3:45:
15:bd:06:35:5e:4f:6b:28:40:49:b5:18:08:19:00:e1:d7:a5:
83:4d:be:31:df:ca:29:95:a5:8e:0c:8c:e1:ba:d7:3b:e6:99:
e7:a1:75:2f:2c:11:b1:7a:a7:9e:b5:b3:da:6a:c9:2a:f2:dd:
4a:08:bc:24:43:b6:0f:a3:ed:65:98:07:90:e8:c5:37:da:3f:
e9:02:3f:fc:5c:f9:3b:37:c9:3c:41:d9:67:8e:2b:3a:7f:71:
e8:7e:db:90:82:e4:f4:5d:1a:fa:d3:41:43:ea:3d:08:64:e4:
65:23:7a:bb:76:5a:e6:f0:dd:54:89:84:ac:d9:d3:49:1e:f6:
be:ff:e9:5e:10:f4:ec:6c:ac:ee:f7:00:b9:1c:e6:7a:8e:8b:
31:89:49:10:e5:a2:87:54:34:f6:e6:2e:28:63:15:4d:0b:cd:
12:74:9f:55:1a:fb:d3:8d:c5:01:8d:55:0c:82:54:5d:29:8e:
3d:e8:9f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:25:56 2024 by rpki-client on console-ams.rpki-client.org