Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ju6-Smwi0rD-0XbLd1ENmRbxgR8.cer
File: ju6-Smwi0rD-0XbLd1ENmRbxgR8.cer (raw, json)
Hash identifier: Qge++eHHrgUM4Etaqy8n2yAijvhPYBod8PkfqtjExUs=
Subject key identifier: 8E:EE:BE:4A:6C:22:D2:B0:FE:D1:76:CB:77:51:0D:99:16:F1:81:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56ED8BF1ECADA4BA7B5EE64A8FF5268
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/ju6-Smwi0rD-0XbLd1ENmRbxgR8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.93.252.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:d8:bf:1e:ca:da:4b:a7:b5:ee:64:a8:ff:52:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8eeebe4a6c22d2b0fed176cb77510d9916f1811f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b5:81:fe:c0:1f:32:05:b1:eb:92:80:90:83:
98:b5:3f:44:94:1c:b8:e6:50:9b:a3:3a:ef:27:3e:
7a:9b:56:7f:ce:bf:16:5c:b8:6e:47:d9:e1:e4:40:
44:f6:07:0a:52:8b:a7:d8:5b:d5:43:b4:a5:20:dd:
ac:b9:3d:c0:ab:39:64:e9:9e:93:63:f3:e4:86:7c:
48:a1:d6:58:b2:e3:c8:7f:1a:f8:4f:8d:de:60:10:
2a:c8:21:2b:35:df:94:1f:79:0b:2a:4f:83:f6:d9:
1a:d0:e1:bb:6b:59:da:4d:22:ca:4b:e0:8a:83:2c:
07:41:29:70:9d:b1:ae:1a:49:28:b3:2c:b6:a1:6e:
76:99:57:35:12:38:39:95:5d:d6:91:93:6c:d3:ac:
6c:7f:c6:c7:18:90:89:4a:ea:a0:f1:0c:b9:d5:e7:
df:77:4c:b1:4d:e1:d3:bb:98:7b:2f:9c:f6:51:03:
f9:46:c5:f1:b6:07:4c:cc:b3:72:47:fb:84:4c:0e:
67:4b:0d:85:61:7f:d7:18:2d:33:22:dc:4a:95:58:
12:4b:e0:9b:8e:0f:7f:15:f0:65:c7:ee:8d:76:47:
fa:03:03:9d:74:18:9c:5c:a4:41:fd:9c:dd:45:a7:
a9:8b:8f:39:d7:54:15:d6:84:d8:98:c0:a5:dd:ff:
3a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EE:BE:4A:6C:22:D2:B0:FE:D1:76:CB:77:51:0D:99:16:F1:81:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/ju6-Smwi0rD-0XbLd1ENmRbxgR8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.252.0/24
Signature Algorithm: sha256WithRSAEncryption
35:34:f7:9f:af:c9:04:46:bb:ac:85:68:6a:f6:c8:f6:01:01:
3e:d6:7d:ce:13:5d:ff:40:fe:8e:ef:84:a1:26:e2:22:5c:e6:
ae:6d:37:6c:bf:91:9d:39:d2:21:02:ab:a8:50:45:da:1f:28:
bb:cc:24:09:45:aa:ba:12:d2:e0:52:cf:f0:0b:81:10:55:5b:
a4:fc:82:b2:fc:3d:df:b1:77:f0:8f:5b:42:3e:4e:37:c2:cb:
27:cb:a6:20:25:a4:84:e2:70:36:5c:30:b6:f6:95:97:4c:78:
24:38:a9:2f:74:95:fe:81:fd:0f:1b:d4:d6:26:15:82:6f:a6:
e5:16:f9:92:dd:31:e4:1f:12:73:d8:86:ac:f6:56:f4:ed:b3:
8f:db:04:5f:6f:9a:8e:a5:55:8d:c4:92:a0:b4:25:16:fa:6f:
39:21:02:0f:65:a3:d4:73:ae:69:fc:e1:c3:3e:a6:a4:9a:64:
5a:61:af:30:23:cf:82:28:fe:bb:d7:5d:66:0c:f7:5f:5b:57:
3f:62:1b:61:21:37:33:66:6a:d9:de:e0:f0:f9:7c:3b:2a:fa:
dc:58:40:6e:12:32:36:ea:95:fe:37:09:da:4f:b1:de:b2:e2:
d9:90:c7:fe:78:4a:bf:ac:a4:ae:e7:3c:b1:58:13:f1:8a:da:
ed:a9:9f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:11:22 2024 by rpki-client on console-ams.rpki-client.org