Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
File: iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer (raw, json)
Hash identifier: UYAP9gtV1aUPr443oU2an7GB1otraEg1fxYLyW1UYDk=
Subject key identifier: 89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F0FD525567ACF96B1B8AE6830BA688303
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 24 Apr 2024 11:19:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.83.0.0/22
IP: 195.95.236.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0f:d5:25:56:7a:cf:96:b1:b8:ae:68:30:ba:68:83:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 24 11:19:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=897378126f55d96519553daa48e02e3282121644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c3:ba:7c:67:11:cb:67:be:91:78:ba:cf:9e:
bd:e3:08:12:2d:bc:fc:d4:03:eb:57:7c:5e:16:23:
84:6f:02:38:d0:03:85:f2:8d:ea:7c:51:52:00:26:
06:dd:ab:e1:33:b9:ac:95:60:6e:0e:ba:f2:d6:e7:
b7:e3:c2:7e:56:7d:f7:e0:30:19:d9:43:93:36:ab:
fd:c9:58:00:69:01:54:7d:3c:1b:51:dc:51:ef:0a:
d7:34:08:62:00:e7:3a:4e:ec:c1:d7:4e:70:8c:1f:
5d:58:1b:a2:bd:8e:d3:e3:09:71:59:5f:c6:3f:86:
6f:22:69:7e:60:18:2e:0f:7e:bd:44:af:46:ad:fc:
65:e9:7d:aa:eb:4c:85:15:f6:ab:dc:e0:30:b6:38:
8b:cb:5c:a1:01:77:c3:e9:b7:a9:79:4a:20:3d:0d:
3f:a0:c7:f9:34:6a:ee:1e:f2:c2:d4:77:89:44:87:
d2:79:2c:34:df:8c:7a:03:56:ab:4f:03:3c:a0:bd:
58:fa:ed:92:bb:78:01:fa:8c:f4:75:61:56:06:fb:
49:da:9e:b9:66:3c:09:6d:fd:c5:de:2e:83:0a:01:
17:71:cc:04:76:0a:17:4f:89:3d:52:bb:e3:93:db:
80:d0:60:38:57:2c:88:46:40:f8:5b:c8:59:39:70:
f0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.0.0/22
195.95.236.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f7:94:42:04:c0:ec:e9:83:35:1b:ab:1a:f2:96:05:af:f7:
4d:94:04:91:85:73:40:68:6f:b9:35:75:db:e7:50:30:b5:5f:
1d:01:93:9c:2f:1b:e9:c3:3d:59:f1:1e:7a:40:cd:f4:cc:7c:
66:2d:89:3a:8f:d3:e1:18:c7:da:55:b6:24:b0:d5:b3:2c:94:
d4:7d:a4:40:20:b9:8a:67:1e:26:26:73:e4:e5:98:ef:26:e7:
8b:18:ec:8c:4f:a7:e3:f4:e0:04:39:31:ab:43:cb:42:b1:47:
e0:9c:9b:9e:b9:56:e3:3e:41:06:7c:b9:33:6d:3f:b6:7b:a4:
06:55:fb:d8:f8:71:74:a9:c2:07:fc:44:e5:44:9e:94:5e:b3:
15:e9:fb:5c:be:7e:62:b0:14:62:cf:04:69:33:6b:d8:a1:ce:
13:b3:c0:59:9d:e8:08:3b:b7:4c:69:6e:82:aa:92:71:a9:bf:
9f:55:6f:38:b7:5f:2d:b4:2c:51:bb:12:37:c4:53:bc:7a:b1:
7b:bd:f5:16:fb:f6:08:b1:c5:e7:09:cd:f0:49:53:6b:3f:73:
ce:3a:23:d4:7b:e3:8a:59:4b:62:c3:48:0e:bb:cf:c7:04:c5:
2e:0a:ab:42:1e:11:9e:7f:d4:a3:8f:c3:82:47:32:b2:02:da:
09:e3:22:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:37:13 2024 by rpki-client on console-fra.rpki-client.org