Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer (raw, json)
Hash identifier: HQfpUQl/NGtDPY4FQhI2nqJuzf5j4WqG0ZVAtuMR+IU=
Subject key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D3091D1F74296C947FDAA28A598EB4F60
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 22 Jan 2024 09:47:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 95.128.198.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:91:d1:f7:42:96:c9:47:fd:aa:28:a5:98:eb:4f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 22 09:47:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c2:a4:c4:70:ee:4f:d3:9f:d7:d2:d5:fb:df:
df:d4:4f:05:b0:4a:6e:8e:68:6d:0a:5f:3a:6a:00:
fd:c8:a1:14:ae:1a:f9:13:c4:98:bf:b1:a5:8c:38:
bf:85:6c:a6:d9:30:16:f4:d7:e2:fe:e2:f0:6e:d1:
5a:46:9c:b9:a1:f8:70:38:22:62:b8:3a:20:90:23:
ae:62:29:79:53:9a:84:2b:7c:01:18:ab:5a:95:79:
69:51:1f:2d:08:c7:26:71:f2:c5:12:79:56:8c:41:
99:b1:21:57:42:78:27:26:c8:09:15:5f:d6:e4:b2:
fb:a9:de:bf:47:f2:5d:c3:43:73:e3:9b:34:04:22:
53:5d:05:11:10:ca:ea:70:b8:3e:3b:13:e5:00:6e:
69:d1:ca:6a:08:e1:80:62:d5:7b:dd:4b:25:23:62:
73:4d:08:b5:12:74:49:bc:f7:1e:60:4d:1f:1b:ec:
1f:54:85:c2:23:6b:78:68:4b:2f:b1:6d:14:f2:0a:
cd:d4:ff:5a:53:ac:26:b3:90:4b:99:fc:fd:56:c0:
ee:b2:4e:5c:a7:1a:74:24:bd:2c:b6:61:c3:9e:25:
75:13:93:ea:10:c7:55:f8:a6:5e:99:80:b5:2a:d8:
d0:be:00:e9:f8:be:41:63:55:8e:bc:33:14:f1:81:
ae:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.198.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:47:bc:f5:cc:ec:b5:77:d9:e4:e3:9c:62:72:c7:3e:ec:d0:
3b:04:f5:cc:88:e0:98:5d:ac:20:b1:d1:b2:21:d5:07:3b:33:
ac:60:71:fe:c6:0b:48:ab:f0:fc:1b:3d:17:a6:e1:7c:29:ed:
87:03:e7:92:1a:57:58:cb:ca:81:74:fc:09:db:0e:0b:6e:9d:
69:39:92:76:8f:15:87:f3:35:6e:1e:cd:25:38:ba:d2:62:2f:
e3:4e:cf:5a:c7:63:a7:b3:0a:0b:3b:d6:c7:a1:27:32:b2:a5:
31:4a:85:d3:e0:ae:21:28:1f:94:54:a0:45:4f:90:5f:08:c2:
81:86:b6:b9:ab:1f:ee:bf:7e:8e:cb:96:1e:14:83:c7:d5:6c:
97:16:35:b4:3f:bb:cc:00:29:b3:5d:b3:6b:3b:83:b4:5c:2c:
ae:b2:99:2f:0a:3e:4c:fb:35:10:87:71:1d:86:db:28:a2:90:
bd:10:ee:c6:6e:3c:63:88:c0:be:57:bc:67:72:ef:59:25:3b:
98:cf:e2:51:f3:88:a4:84:a7:e8:f1:e4:cd:4c:d0:eb:8d:cc:
7c:a2:41:24:89:07:b0:64:86:ff:4d:bf:75:b7:7c:7c:13:40:
40:b3:27:b0:6e:8e:34:06:44:bf:c4:ef:9d:fe:b6:e2:0e:38:
28:4e:ac:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:29:18 2024 by rpki-client on console-ams.rpki-client.org