Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
File: imAdLqH5SMoBjDNb7actvsB51uY.cer (raw, json)
Hash identifier: vAvHm8WxfKimhGMk9TiovbfVVgnqetQzHzLMPHqNFqw=
Subject key identifier: 8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018ECCA362EB5BDA087FE5BCB428BF02F1B1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 11 Apr 2024 10:10:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.227.228.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:a3:62:eb:5b:da:08:7f:e5:bc:b4:28:bf:02:f1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 11 10:10:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:fd:7d:36:5e:54:98:d9:f2:72:06:29:fb:
e4:76:aa:a9:1d:80:4e:d7:ca:a6:8d:18:4c:33:18:
78:05:f7:d8:19:75:b1:2d:c0:be:c7:01:83:20:87:
24:82:c6:4d:63:cc:e8:2d:81:50:d6:b4:e7:9b:e4:
eb:31:66:d9:d1:07:07:fa:1c:ae:1f:7c:94:de:b8:
57:46:fb:49:7a:f0:61:4c:ea:df:bb:10:ef:11:0a:
e2:80:25:b5:8e:1c:66:4e:40:bf:07:de:fe:e2:ea:
66:1d:e5:47:5a:dd:44:42:b3:b6:4e:0e:6c:e9:3a:
ef:4e:6d:b5:db:e3:e7:a4:f3:ed:68:60:57:11:a1:
36:e0:d2:2a:b2:8b:37:fa:4b:b8:55:fe:1c:8f:4e:
a3:9f:30:d7:0d:49:85:ba:93:6d:b8:50:ed:97:93:
31:fb:95:cf:4b:dc:a3:fb:3c:4d:c2:08:1b:16:24:
27:bd:86:d4:10:1a:0b:08:5f:3b:e1:2e:8f:7c:1a:
43:8b:a2:40:9d:16:89:de:f7:99:7e:de:b0:7d:ff:
20:b1:1f:94:1c:77:a5:62:e8:2d:95:09:5c:21:9d:
75:24:b5:31:37:72:44:05:db:12:7f:97:e2:19:55:
ed:23:07:05:6a:b2:99:a8:2e:2c:31:15:2c:cf:62:
dc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.228.0/23
Signature Algorithm: sha256WithRSAEncryption
af:7a:28:75:6c:cf:17:46:98:a9:8a:e7:7c:a1:fa:b2:0e:2c:
47:ec:a2:7f:b1:b6:20:c4:d3:b3:2e:17:fd:42:a1:c7:19:bb:
70:05:fd:5d:c5:de:a8:d0:ff:06:1c:bc:ab:eb:59:6a:df:a5:
46:bd:e9:f2:e2:c8:95:7b:92:4f:21:df:99:36:bb:fe:85:ac:
7e:3f:e8:f3:67:10:d0:b3:dc:28:ef:b3:10:59:e1:48:82:23:
23:d2:ef:fd:99:e4:a9:07:a3:e8:16:aa:a7:ea:46:ec:31:9c:
67:73:0a:55:66:98:55:91:e7:17:3a:49:98:21:5a:d2:15:bd:
59:20:55:14:83:72:78:5c:a2:e6:08:a9:94:d2:22:fd:34:75:
81:08:02:d5:aa:d5:64:61:3d:8e:a3:7b:39:0c:40:38:2b:51:
e6:eb:cb:aa:33:1b:a0:f9:76:0a:3d:fb:20:21:b1:c5:72:4c:
8e:5e:32:9b:76:23:45:73:75:3f:11:ae:14:4d:b5:bb:1d:b8:
cd:37:0f:74:df:d4:b1:65:54:86:f6:68:d8:88:3f:af:13:1d:
94:ba:8e:dc:c0:2f:68:f1:8d:bc:2f:31:86:66:33:b1:1d:3b:
b4:e7:48:8f:46:7b:a1:5b:f2:35:7f:1c:0d:35:cc:2f:df:4a:
d8:80:0a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:55:33 2024 by rpki-client on console-fra.rpki-client.org