Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
File: kTOA6LhQRU2zgd3euawsyKL2JTE.cer (raw, json)
Hash identifier: l15DZ18nCjtPAJNRG9Wa+D+x/BmFoKg7yLXspWzD85Y=
Subject key identifier: 91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EAEC1CE1266BBFD558FCF46C0C5B8413E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 05 Apr 2024 14:55:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.26.87.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ae:c1:ce:12:66:bb:fd:55:8f:cf:46:c0:c5:b8:41:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 5 14:55:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=913380e8b850454db381dddeb9ac2cc8a2f62531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:84:52:07:3b:0d:4f:92:20:ed:0f:37:d6:
94:38:68:2b:90:1b:f7:66:f1:85:52:55:1c:e9:aa:
5c:77:23:ba:14:9f:8a:9d:d8:d1:55:28:7f:59:08:
92:49:b4:4d:81:0f:40:48:f2:5d:31:7a:e2:fa:9f:
eb:ca:8d:50:99:0f:ff:7d:04:15:dd:06:49:bb:af:
df:be:22:0d:40:f2:5d:d3:11:5f:31:c2:a3:b0:13:
11:f3:2f:f1:94:00:21:78:f5:cb:1e:a4:32:6e:ab:
01:ab:be:dc:e5:d4:b7:5c:d0:fa:66:f0:11:7d:7e:
71:12:fd:61:78:c6:41:ab:3b:06:11:34:50:16:20:
f5:99:b2:34:47:6d:48:5c:1a:bb:19:65:e7:55:e2:
1b:0f:d4:44:49:ff:0b:5b:c5:0b:31:47:50:c4:7c:
1f:da:18:b9:b8:7d:5b:13:16:dd:56:c8:62:7c:1d:
c9:97:95:68:b4:05:13:9a:2d:76:1e:72:5e:ea:60:
ed:ce:f2:e9:7f:57:92:86:16:20:d5:7e:a5:42:24:
30:26:06:6d:f0:d3:5f:93:22:8c:0d:f8:54:1e:56:
e9:a9:6b:a7:98:b5:c2:ac:4c:03:e5:9e:00:9b:6e:
37:63:2c:16:86:1b:6f:b5:25:ea:21:35:87:84:97:
12:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.87.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:da:02:19:b0:39:c8:e2:19:46:99:79:74:a0:d4:30:21:02:
79:10:34:65:04:92:f0:ce:95:63:26:37:47:3a:7b:12:a6:99:
9f:1f:65:7f:12:7a:82:6b:f3:03:35:39:8b:29:fb:09:c7:35:
fe:5b:54:d9:c6:24:03:4f:d7:94:87:f1:32:ad:ed:16:3d:b0:
69:60:b4:da:4d:06:03:ac:43:3e:ac:08:53:ec:5d:9a:da:ee:
2f:ce:df:6e:dd:b3:47:09:8e:dc:8a:ba:c0:53:49:f8:71:d0:
a6:85:4e:8e:f3:71:ce:2d:84:ec:42:b9:4f:8e:e8:d5:ef:bd:
2b:79:7b:dd:99:b7:6b:1d:0e:37:72:9d:19:8d:3e:b7:d7:4a:
9b:ae:a6:33:9f:9c:40:e4:8c:6f:4a:d2:c8:85:7e:e6:7a:0a:
55:0a:ce:99:5e:16:ac:87:e0:fa:38:b1:df:d5:c6:3a:61:d0:
ca:70:46:c0:78:ac:f3:50:ab:bd:b7:d7:4d:bf:5c:b1:fc:2d:
63:0a:3f:c0:41:5f:93:39:f7:5e:ae:95:30:84:1c:18:69:39:
f4:53:62:7d:1a:d3:13:a7:f0:32:be:d1:13:8d:bd:a0:b1:aa:
2a:8b:07:60:85:03:78:22:69:05:70:2b:41:53:bd:03:23:50:
23:b3:71:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:34:23 2024 by rpki-client on console-ams.rpki-client.org