Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
File: kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer (raw, json)
Hash identifier: Ick12iCCULSvhk4KbFGZ8ygnCWwhWaPTlkYqP1QJhjw=
Subject key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E325685A295E4BD1F4542D7F3E8E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.105.3.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:32:56:85:a2:95:e4:bd:1f:45:42:d7:f3:e8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:1e:28:93:ae:70:d4:ef:f5:93:dd:88:19:
98:0b:ec:bb:59:dc:6a:55:52:40:9a:40:0e:d0:69:
09:f7:b3:17:6e:bc:05:42:2b:b1:3b:49:56:02:e8:
96:e4:8a:23:a5:6d:6e:14:78:68:02:b5:15:1d:5b:
37:28:f2:be:25:f4:c7:79:5c:e8:cf:02:06:95:ef:
3b:38:49:33:3b:8a:cf:aa:3f:4c:f6:b5:80:cc:b4:
9b:e8:62:c6:8a:dd:84:4a:4b:7d:b6:94:5f:2b:51:
48:c5:72:27:8d:a0:e4:a1:c1:49:b1:34:2a:19:00:
2a:b0:21:c6:97:4c:39:60:00:04:45:a1:3b:39:30:
36:25:46:7d:35:d9:91:e3:13:57:92:10:85:af:a9:
79:f8:69:ca:be:b6:a7:e2:6e:3f:d6:1c:2a:94:b7:
14:f5:fa:e7:0b:73:6a:d2:59:0a:0c:d6:46:b7:25:
88:32:3d:93:73:e2:e3:7d:39:f1:98:35:c4:e0:f7:
63:45:41:77:2f:ae:a3:c8:ca:29:a1:f9:e9:02:ca:
ea:10:cb:87:26:a1:f8:8a:de:9b:cc:fd:99:12:3f:
a9:18:6a:bc:82:40:12:32:79:3a:f1:29:8e:bd:a2:
42:60:88:b8:63:db:e3:67:16:9c:d5:44:56:3f:46:
e7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ad:b0:7d:12:41:07:82:6e:33:eb:d2:7f:94:6c:4d:ac:f4:
17:7e:d2:9c:8d:f9:03:b0:f4:d0:7f:17:2e:d2:18:6b:34:29:
c1:c8:8a:37:e6:50:eb:fa:b1:47:2e:96:bc:17:bf:b5:3e:42:
f0:60:07:f3:98:a3:30:89:9c:9d:58:ff:3d:d8:c7:f1:b4:2c:
2a:31:66:c6:2d:a4:ad:0b:8e:9a:2d:68:46:93:8d:de:b3:4d:
5c:4b:fe:97:de:11:fa:80:dc:25:e2:b1:02:0b:e5:36:96:f1:
8a:8a:80:f5:bf:16:99:e1:50:bd:60:87:be:e8:b2:19:74:37:
f9:81:fa:aa:95:cc:2b:76:be:d4:57:89:ba:6b:5f:ad:4f:16:
a4:40:51:6e:9c:0b:fb:b9:01:b2:53:22:c7:85:35:4d:4c:68:
95:92:29:41:38:06:4c:5f:45:77:5f:1e:d5:af:24:4a:b6:f9:
b2:88:90:e5:de:31:8e:01:b3:72:88:10:40:2c:75:dc:92:a9:
b7:c8:04:0b:e4:5c:e3:dc:ef:65:9d:c1:14:74:86:f6:78:16:
a2:ec:8b:8c:a1:d7:ea:ba:ba:e7:3e:e0:4d:2b:7c:1e:6b:65:
6c:b9:43:69:7f:1d:ed:c6:34:1a:fd:38:e6:61:16:49:46:28:
5e:06:ff:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:14:16 2024 by rpki-client on console-fra.rpki-client.org