Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
File: inQVrmNNYTFZy9LOdKwmGn1axNQ.cer (raw, json)
Hash identifier: ct3AylPpRa3WR0IQk8hM9eyibKg+AjiNw8/+JBv2Ipk=
Subject key identifier: 8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCC69CA9787A8F1BD3C4548AA88CBC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:34:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 37.131.179.0 -- 37.131.183.255
IP: 185.212.52.0/22
IP: 2a0b:72c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c6:9c:a9:78:7a:8f:1b:d3:c4:54:8a:a8:8c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:34:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4d:b0:7b:0b:5d:7f:ef:88:60:42:d5:a8:41:
3c:c7:13:15:65:95:b7:cb:95:c0:be:c0:0c:86:79:
d6:ea:a3:35:f3:94:a8:4d:6a:f5:12:24:3e:1d:0f:
7b:8a:04:4b:d3:c0:4a:28:ac:c8:dc:82:a3:1e:ee:
66:09:24:b9:7b:f4:be:68:e8:57:32:d0:63:46:84:
9b:67:9a:67:d0:6d:a0:e7:8b:43:bc:c9:01:1b:09:
4f:b8:f5:27:37:d5:23:75:7f:52:56:70:11:07:e6:
97:50:10:77:5b:e1:b4:be:60:c1:5d:46:fd:29:bf:
32:f0:be:00:10:f7:f7:fe:ae:81:18:a3:ae:4b:dd:
8d:ec:0a:57:97:ca:89:e8:e4:9c:21:11:a9:3d:25:
2b:bd:74:a1:c6:d6:ca:8d:cc:c9:cc:22:d0:b9:51:
66:2a:fe:05:ce:08:54:56:19:97:f1:89:ae:62:d2:
fc:6a:1e:b1:a7:fa:cb:30:13:c4:79:d3:bf:11:ac:
08:7a:16:0e:7b:72:7f:2e:f7:55:34:71:2d:79:6f:
ac:d1:a7:16:fd:22:bc:6b:43:53:58:75:72:ec:fc:
3c:ee:d5:0d:cf:fd:bf:57:42:0c:7a:96:87:13:25:
f8:0a:fe:3d:66:da:73:70:f8:27:e2:2b:50:73:91:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.179.0-37.131.183.255
185.212.52.0/22
IPv6:
2a0b:72c0::/32
Signature Algorithm: sha256WithRSAEncryption
92:57:a9:86:79:27:1e:1e:31:c7:1e:a3:e9:22:75:c5:cc:2f:
e2:00:27:4e:96:1a:90:c0:9f:92:7c:68:ca:5d:5c:5a:23:bb:
b0:d0:db:6b:bf:f4:1f:db:a3:6d:1b:d9:d9:cd:3d:1a:94:4c:
2b:ef:00:57:2b:b5:f7:5d:28:76:a8:0f:63:0e:f8:57:3e:70:
51:bb:f1:de:07:af:a1:49:d5:2a:a7:5e:cd:06:06:56:b3:d8:
fe:f2:e0:8e:30:45:79:86:f3:fa:ae:32:20:51:f6:7b:79:a0:
7f:c6:03:56:30:1e:ae:4f:ac:2a:ab:e9:dd:30:ad:bf:1a:66:
0c:d0:e5:62:3b:cb:48:f4:e6:db:30:15:e2:19:f9:0e:c2:88:
ab:e4:f4:44:de:cc:45:6e:bf:7b:0b:57:a8:1a:13:3f:a9:52:
28:58:3e:a0:95:05:9f:45:68:f3:f9:15:c3:bf:1f:09:78:96:
e3:da:02:e8:61:09:f3:65:2f:5a:5d:67:2e:58:2a:64:ea:0c:
83:c1:ff:7d:2a:b2:38:30:0b:80:cf:db:70:41:71:9f:0c:81:
34:c5:bd:35:98:31:46:2f:1d:9b:5d:99:5f:0a:98:25:77:73:
d7:16:32:8e:a6:c5:ff:45:4e:d4:b8:82:95:b9:f1:0d:85:6a:
17:11:c3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:37:29 2024 by rpki-client on console-fra.rpki-client.org