Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
File: m-Io1xO-xtTJq87C8Aoo6CH8J78.cer (raw, json)
Hash identifier: ZkDHvL5iQm6Q20e6Vfja0niLtGcJVNC5CYrduKMqGnw=
Subject key identifier: 9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50015FB17FBE46AB743F7EFA0D1F8F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.238.124.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:15:fb:17:fb:e4:6a:b7:43:f7:ef:a0:d1:f8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:c7:26:19:bc:2a:11:03:08:10:0f:17:cf:
d8:6c:ae:fb:ab:65:a7:31:56:df:f5:8b:d5:28:5f:
4f:2a:54:18:3f:2a:60:6c:ab:70:47:d4:c8:43:11:
6e:49:8f:de:6b:de:93:c6:e3:f6:22:d0:e0:f4:d5:
0c:42:a4:dd:a6:e2:fd:21:cb:26:d9:d0:b4:24:1f:
7a:2f:ae:94:9c:9f:39:60:ab:62:54:e7:26:64:4c:
8f:c0:7a:c8:c4:de:4a:7c:47:2f:12:26:cf:07:a5:
59:f4:10:06:40:16:e4:20:22:c4:b0:94:fa:9a:48:
b5:87:ad:58:9f:7e:2e:02:9a:9d:72:ff:f4:d5:11:
0e:d2:12:20:34:9a:12:e5:c5:f5:05:2c:86:7a:dd:
a1:e2:68:93:10:bd:21:c1:8a:7b:f2:13:b5:7f:c7:
58:b2:d3:fc:18:1f:d8:ed:c6:ae:b2:19:59:f5:e5:
68:e0:19:74:e3:3f:8a:80:57:6c:b6:40:b0:dd:32:
50:9a:21:96:55:a3:82:c9:02:45:9d:ac:ed:39:1b:
78:05:d7:78:f7:c9:95:ff:4c:41:89:1d:16:7e:a3:
af:b8:fb:f9:0b:71:2b:ad:96:05:8e:21:af:af:4c:
85:62:04:4a:b7:51:f6:7b:bc:76:a9:a8:8b:d2:e1:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.124.0/22
Signature Algorithm: sha256WithRSAEncryption
98:f6:85:55:2e:3e:30:47:c1:3f:71:1b:db:56:12:1a:9b:b4:
16:3e:f7:d6:42:7d:06:9d:5d:44:73:d3:d6:ef:b8:e1:65:a5:
30:8a:b1:c0:2b:a0:25:dc:f8:9e:88:00:8e:b0:cd:34:ef:41:
84:7a:d6:0c:b3:cf:3c:80:4a:42:b1:ce:cc:89:2e:08:a6:ee:
b4:d1:a6:0b:3c:c4:f3:c1:91:25:ec:57:91:34:02:56:32:1c:
4d:11:fa:48:44:e4:05:9b:25:f1:2d:6d:2b:2d:5b:ff:a7:79:
a1:5f:42:44:86:27:0a:c4:59:7a:67:e1:ca:39:df:5e:e0:38:
45:8d:85:fb:6a:8b:ce:f1:73:a7:d0:6d:d5:86:bf:41:0b:3a:
1f:d1:b4:2e:4e:39:3c:6e:7a:a5:28:58:14:87:27:22:fe:5d:
b2:d6:68:49:f0:b1:4d:f7:a6:41:15:63:c0:4a:56:43:94:f6:
58:d8:b2:6e:59:00:9f:4c:1a:1d:fc:64:40:17:75:b4:58:aa:
5c:b8:d0:ce:e3:58:89:96:ce:76:48:95:b5:e4:0a:62:3e:4e:
d4:31:f6:f7:80:18:c1:a7:3e:dc:2a:ba:09:0a:65:5c:ef:10:
e7:05:93:c6:44:e0:06:4b:1d:ab:b9:f4:6d:89:a9:b2:1b:b0:
e7:e4:c7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:36:27 2024 by rpki-client on console-fra.rpki-client.org