Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
File: koAW21XmZLpyHhmumrQxbBDZZwg.cer (raw, json)
Hash identifier: WNuLqkvkOx7O3Xa+DVHCl7hmUXs4mLpryLDRYelu2+E=
Subject key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4937659EA1330FCB8740969788354E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.43.97.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:76:59:ea:13:30:fc:b8:74:09:69:78:83:54:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=928016db55e664ba721e19ae9ab4316c10d96708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:c4:c7:cd:0d:d2:ad:82:27:a7:63:16:d6:
72:de:df:be:b7:79:44:00:d0:3b:b1:00:46:4b:6e:
65:53:af:59:de:39:2b:a5:1e:db:5d:06:50:42:77:
19:d0:60:92:8a:0d:44:81:b5:b8:bc:18:72:dd:e8:
6e:53:8b:d4:de:ec:fc:46:ec:f3:2d:de:3b:81:86:
e4:88:64:d8:d8:90:6e:19:ae:80:f0:45:41:88:41:
7a:44:6c:f1:2b:46:3a:6b:85:5c:07:60:b1:ff:6b:
6a:03:6a:15:f1:a4:f8:8c:dc:d7:7f:db:e7:95:a2:
73:3b:ff:24:50:5b:a4:98:55:1f:9b:9a:08:54:31:
d0:cb:82:38:76:3b:18:75:4d:63:f6:29:d3:e0:d5:
ee:d4:4c:b8:3b:0c:24:e3:b8:9a:fe:12:84:f4:d0:
0a:f7:75:e4:ef:1d:f7:77:2b:ad:25:73:4e:5e:1a:
32:d8:71:f9:de:84:bd:6b:cb:f9:cb:a2:68:20:0d:
4d:c8:d0:dc:d3:fe:d9:9b:7e:a6:fe:24:20:e3:0b:
b1:30:9e:c5:69:9c:8f:99:5e:8f:bf:f8:d1:49:b2:
c8:23:1b:14:ba:43:28:f0:1d:97:06:6d:a6:28:cd:
71:54:fb:7c:88:59:f7:fa:31:20:cc:4f:0b:15:1c:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.97.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:90:eb:e5:e9:4f:88:18:99:f5:2f:b5:d7:40:f4:53:9c:b8:
80:b5:93:79:a5:52:eb:0e:10:9d:a4:70:cc:80:03:cc:2d:9d:
6b:08:1d:a8:09:9a:44:20:98:e2:80:93:3b:92:ff:fc:40:55:
86:e2:5e:a4:5b:56:e4:41:6a:c6:37:9f:58:e8:8e:da:e3:30:
d0:b5:d2:02:db:d9:f1:01:05:bb:90:8c:93:be:1b:83:a5:40:
84:11:94:8c:ed:01:3b:4f:10:43:18:0a:d5:a2:72:29:b7:69:
31:bf:a5:83:0a:9c:90:cd:01:25:cd:ea:57:ed:bf:1c:3a:38:
2c:8e:12:ed:1f:20:5a:9c:f8:12:56:76:c1:c1:e7:7b:77:bd:
9c:02:3c:64:cf:75:ac:07:37:f5:16:14:06:cc:d1:f4:3d:a5:
a2:c1:25:6d:7b:7c:d2:92:c7:c9:b1:ee:90:e8:04:42:c0:33:
d2:15:55:e5:71:1d:14:86:ee:f5:94:a9:9a:af:8a:cd:e3:e3:
95:95:79:4e:67:31:8e:24:69:a4:de:9c:98:5a:7f:7c:76:85:
9a:75:b1:0f:19:e1:7b:fa:c8:12:5b:44:57:23:9c:30:f7:91:
da:f6:8c:66:5e:fa:5d:8f:f2:e8:99:18:f4:b8:d2:06:20:4e:
a9:32:ba:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:11:51 2024 by rpki-client on console-ams.rpki-client.org