Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
File: iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer (raw, json)
Hash identifier: P/h2ePFdA/bKbYDeBUXaT0zJ9rEXiWTB0JBzn0ZSvCI=
Subject key identifier: 88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DD04B96CEA6140B89F54676A7F0DA0066
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 22 Feb 2024 10:10:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.208.80.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d0:4b:96:ce:a6:14:0b:89:f5:46:76:a7:f0:da:00:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 22 10:10:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:c1:e6:77:ea:7e:aa:d7:5f:65:22:69:a2:
74:da:6b:9f:98:8e:63:34:6a:5d:d6:00:49:d2:51:
45:12:73:44:15:03:ba:3e:61:51:6a:f6:af:75:96:
75:92:4e:0c:a0:a1:89:9c:be:9f:7b:34:3b:14:3b:
ea:6f:fc:9d:23:b6:77:1e:2f:1c:38:43:41:22:0c:
62:23:9c:ed:df:ae:a8:ad:4c:d8:6c:c5:6c:e8:e9:
be:8d:bb:4a:18:86:e1:8c:b2:ec:a7:02:f7:83:80:
2a:7c:4e:dc:a0:ff:4e:1d:20:ce:88:82:19:18:a2:
e2:82:51:0b:7a:c7:06:ca:25:44:3d:4d:0b:48:76:
df:f3:2b:2a:64:94:92:6e:5e:56:a1:25:b1:d7:82:
e5:a6:71:d1:e9:e6:a4:a9:76:b3:d4:e7:1a:06:33:
8a:e8:a7:a3:48:5c:29:77:88:dc:2e:d8:67:f8:ba:
5c:2e:e3:97:c2:43:c5:49:31:46:38:4a:10:f4:76:
77:cb:d6:76:05:f5:43:4f:7e:2a:30:58:15:37:52:
c7:62:2c:92:03:5b:15:f3:3d:54:01:9f:47:08:1b:
ed:a9:de:9c:d5:89:a9:c8:03:a7:23:21:18:a4:a7:
d6:16:b9:30:81:ca:25:50:84:43:a4:a9:ec:2f:1c:
6d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.80.0/24
Signature Algorithm: sha256WithRSAEncryption
71:86:2b:a9:d8:19:62:22:54:ae:91:b7:6a:c3:aa:cd:3c:2b:
66:a6:7b:51:ed:f7:38:bc:91:4d:51:2e:01:8c:0c:70:e0:24:
a7:53:f8:6d:ad:72:72:05:99:9f:0e:bf:d4:3f:b4:9b:b6:b6:
c0:d4:fe:1e:2c:be:f0:7e:cc:6d:40:ac:1d:52:29:40:84:6a:
65:05:c0:2a:80:84:61:0e:9e:88:9f:c7:12:95:1f:65:92:ce:
f1:f4:37:e1:10:29:9a:4b:86:bc:d6:44:72:5a:f9:56:7b:e2:
36:4a:81:c5:7a:04:ec:16:94:70:1f:b8:d7:63:dc:36:92:10:
77:3f:68:b7:5e:60:87:2e:6e:28:22:0e:83:9c:8c:01:4a:4f:
66:19:08:4e:98:4f:37:20:64:e9:54:57:51:85:3d:a1:63:16:
dc:91:bb:46:71:e2:dd:8f:b8:a1:68:a7:c7:f1:70:b5:79:09:
89:32:d5:62:b8:95:a7:c7:95:f8:7b:36:45:b8:bd:a1:0b:3f:
6c:b4:00:83:4f:a7:93:63:fc:fe:8c:27:f9:8c:db:97:89:0b:
6f:ec:31:d0:33:5f:d2:5c:3a:5c:ca:d1:a1:d2:84:5d:f5:2f:
3d:15:02:0f:39:9b:b6:59:1b:94:50:7c:73:7a:af:bb:a7:24:
d7:2d:72:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:53:04 2024 by rpki-client on console-fra.rpki-client.org