Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
File: i85CgamU1SFm7z_xdyi64hiFX8Q.cer (raw, json)
Hash identifier: Qe3upidQPwnQQoMIskWg64ww94b4UXctqBd0sMBOMfQ=
Subject key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D7F8E6AB2087B109CCEFCDEADAAEE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:30:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.8.165.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:7f:8e:6a:b2:08:7b:10:9c:ce:fc:de:ad:aa:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b3:94:6d:04:70:f6:f2:69:a0:c1:e4:4e:5c:
ca:8e:a2:41:15:b5:45:8f:69:ca:41:55:2c:0a:4a:
ec:a6:b3:97:fd:59:3b:f5:2c:3e:3f:44:ae:6b:84:
60:78:65:6d:a2:bd:20:0c:21:3a:12:5d:a2:22:d1:
02:f9:2f:ae:81:b0:4e:8b:9a:75:a7:e9:c2:ef:6f:
0b:a2:6c:b5:d4:e3:ef:ec:84:87:40:ec:1d:bb:3f:
43:0d:3d:8a:c1:3b:c5:81:18:aa:66:53:7e:66:5e:
05:00:e2:d5:fd:5f:f2:b5:aa:34:11:3a:11:0b:d6:
9c:f8:8d:5b:b9:7b:ad:fa:ef:04:2d:82:d7:dc:f9:
ba:b7:6e:bd:47:80:c7:72:57:de:ec:f4:e1:1d:d7:
29:24:88:f6:8d:41:c4:a9:94:a7:7c:71:c1:de:ef:
ff:ba:49:96:91:d8:b3:4a:32:53:89:3e:09:eb:8e:
4c:52:bf:6c:ad:e5:83:93:db:f8:23:24:13:0e:15:
0c:06:df:aa:e2:2f:81:9f:3b:b5:98:63:1b:87:90:
73:e9:bd:2b:8e:f4:bf:94:aa:e8:38:47:38:d8:5e:
ee:51:27:e1:71:18:80:af:b9:1c:4d:bd:23:fb:9b:
e7:22:c9:fb:0a:00:2b:f6:dc:37:18:be:40:9f:a0:
08:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.165.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:1c:e6:4e:94:0d:80:8a:be:b9:83:08:32:fb:56:9c:79:cd:
0e:1c:32:0a:5c:ad:53:3d:14:ab:d0:88:6d:62:25:51:e8:3e:
da:8a:bc:8b:fa:d4:b4:79:56:9d:4f:51:4e:34:2c:91:6c:33:
05:ab:8a:0a:0b:29:4b:f5:c7:95:aa:c1:e2:76:25:3a:08:ac:
74:dd:19:fe:a6:6c:3a:f8:36:e2:08:48:75:39:14:27:3d:8e:
af:38:0d:9e:60:d4:a6:35:21:e8:9d:89:95:04:7e:57:02:af:
30:ac:e6:ca:37:d6:cd:fd:5b:4e:40:5a:18:39:8b:aa:9e:3a:
fa:7f:6f:82:4b:a6:02:95:1f:49:98:3a:2c:89:74:ad:d5:9e:
50:80:75:c8:ee:2c:15:c7:ec:02:74:fc:68:66:7d:b7:e5:5a:
3e:ef:e5:0b:e7:9d:3d:cc:74:a6:9c:10:94:cf:a5:e1:5d:54:
68:7c:91:c2:70:5b:61:0b:ee:f5:fa:c4:e4:07:ab:3e:14:83:
c5:88:ec:df:2a:97:04:8e:61:5a:e2:f5:4e:83:fd:c4:ae:ed:
f2:90:05:89:32:6f:ed:ca:8f:3e:15:e4:08:82:0d:eb:39:4e:
b8:5e:4e:c8:e8:30:8c:60:f6:f8:a8:b4:c0:fa:28:88:b3:f4:
75:30:b7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:41:03 2024 by rpki-client on console-ams.rpki-client.org