Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
File: iVVHgNslskPAotNhl5sTCn8Txg0.cer (raw, json)
Hash identifier: hqi6c1aq3msnvkcQ8L+wgs9i8IOfQWBtNs7JXKhMW7Q=
Subject key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34947BEE7F9CC788E22C6EA0EB1720A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.75.156.0/22
IP: 2a05:5340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:47:be:e7:f9:cc:78:8e:22:c6:ea:0e:b1:72:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89554780db25b243c0a2d361979b130a7f13c60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:9d:88:54:74:d9:d5:31:c7:33:cc:91:80:
b4:18:35:a8:79:4e:2c:3e:83:44:8d:2f:d3:b2:df:
98:5a:74:a6:91:84:6c:44:88:4e:4a:d3:f6:32:e0:
43:4f:0e:b4:78:ac:3e:a0:a6:df:65:71:8d:2f:59:
56:f9:0a:08:a5:e3:b3:4c:7b:2d:79:79:2e:b6:fd:
dd:42:00:dc:f3:ad:94:75:c2:d3:a3:4f:0f:27:e8:
4a:8d:14:e4:45:ef:3e:40:70:22:09:71:ab:4e:1c:
c1:17:8d:77:e2:48:9f:39:0a:0d:3e:17:20:a5:eb:
49:81:a7:4b:a3:7d:39:77:5d:dc:a5:e9:77:61:43:
13:36:8b:66:fc:99:e8:7f:63:df:79:67:b1:eb:2c:
9a:b7:e9:97:2a:82:57:9e:bc:f2:8b:92:00:c6:3c:
6b:64:3b:02:bd:ef:62:90:19:29:f0:09:38:ac:04:
c0:08:b9:91:99:13:85:35:ea:83:9e:89:72:4d:eb:
9b:f1:2a:38:1e:1d:57:fa:4a:a5:5f:2a:75:34:8c:
2f:ff:a4:09:4f:49:5e:4b:87:fb:81:20:d8:2a:79:
4d:7b:49:2f:c0:b3:3a:cc:04:56:2a:86:f4:83:4f:
4c:05:c7:65:f2:21:79:ae:75:c5:93:53:7a:7d:be:
85:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.156.0/22
IPv6:
2a05:5340::/29
Signature Algorithm: sha256WithRSAEncryption
3a:3a:f8:57:bf:95:91:92:af:9c:6e:44:6f:67:98:46:5e:30:
d1:69:9a:82:0c:0a:09:fc:66:ef:b6:28:f6:eb:42:1d:dd:4c:
6e:a8:f6:b6:04:3d:4a:43:0f:e1:61:9c:84:fc:fe:7b:fe:72:
56:8e:df:50:f5:1d:5c:53:96:1e:a9:fb:05:cc:46:92:90:6d:
b5:ba:84:dd:54:4a:43:1f:12:5a:48:65:d9:b3:28:14:93:17:
40:66:24:f7:68:61:c8:62:aa:34:33:eb:98:80:2b:17:b4:48:
b3:43:ad:87:8b:e4:a7:06:1e:29:52:25:0d:cf:c9:d8:eb:1f:
d6:f7:42:8e:66:d5:40:d9:a0:77:ac:45:77:34:e2:aa:49:c6:
e0:f2:11:f7:3d:31:a3:be:c1:ff:60:65:ee:ac:7a:32:6d:8d:
0d:7d:af:54:01:dc:bc:87:04:0a:70:78:9a:ce:f1:86:be:57:
28:21:62:a6:83:57:ae:01:ec:5d:4a:5a:a5:6a:f2:e6:09:71:
67:9d:6e:91:40:60:1a:57:87:82:d7:77:eb:9e:d4:29:38:02:
1b:ae:97:47:3f:7c:ef:12:44:5a:d8:68:70:80:e9:3f:ea:d8:
50:83:7b:2c:a6:3b:f6:b4:5a:aa:f9:f0:0b:95:c6:ca:e3:21:
b1:e6:64:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:37:10 2024 by rpki-client on console-fra.rpki-client.org