Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
File: mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer (raw, json)
Hash identifier: GrUZcRkE2SP7/8iispxm/pf3kBVggnk0ktALSTW8pHE=
Subject key identifier: 98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42554C56F3F3D7D64639242778FC563
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 141.75.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:54:c5:6f:3f:3d:7d:64:63:92:42:77:8f:c5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9854da518232319f67a32fd8ad4c06536c41d5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:16:8e:b1:3f:58:40:59:94:68:f7:85:45:
6e:d1:12:be:a1:dd:1b:19:47:c0:7c:f9:7a:2a:49:
66:5b:1c:01:83:f2:8b:89:2e:d4:e8:6d:90:72:3d:
ad:c8:03:a7:22:d5:e9:ce:04:36:e2:13:47:8f:39:
f9:d7:49:aa:72:b2:83:93:bf:35:0b:31:1f:e5:91:
fe:9d:3a:be:b1:cb:e2:fc:d3:70:44:a2:4e:e9:f3:
ef:a8:44:99:da:ae:ef:44:db:17:2b:07:0d:5e:10:
e6:4d:6c:b6:38:96:87:aa:8b:57:03:ed:e7:05:5d:
4e:ea:f4:62:21:69:2a:af:55:89:a8:bb:86:33:4e:
d0:23:26:97:15:50:15:49:ff:75:44:07:2f:f8:52:
28:ca:28:51:e1:a7:86:e1:f7:cb:fd:16:e8:72:3d:
98:c1:e4:e1:08:36:aa:b6:a6:ee:e0:a3:a5:03:c9:
76:eb:b0:af:e9:39:4b:0d:30:d1:ff:a2:51:22:c3:
13:49:33:33:bf:ac:80:fc:3b:cc:96:a7:90:b1:67:
71:03:b6:8f:28:01:5c:f1:e6:fe:f5:cd:5f:c7:42:
cb:4b:d2:c7:c4:42:4a:62:3f:b1:a2:bb:fd:7b:42:
78:ca:7d:ef:77:84:c4:45:f3:2c:c6:b0:8d:83:e8:
6a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
67:00:63:ca:ac:9d:25:2a:0d:56:b5:2f:ba:8e:4e:99:ff:5e:
48:0a:12:ef:9d:d2:ef:f1:0c:2b:a4:ab:2e:9e:01:1f:90:55:
e8:5b:9d:79:9e:29:8e:60:17:38:8a:df:d0:31:cc:b5:f3:26:
75:39:f7:fa:2b:14:c7:01:35:03:ee:9c:13:86:c5:8d:48:7b:
df:a7:b9:25:db:9b:2e:00:08:a9:ce:a8:fb:3a:d1:5e:2b:17:
f2:d5:ef:11:43:06:f4:65:c2:bb:38:b8:d1:4c:32:86:50:3e:
a3:4b:c5:fd:92:7a:8a:3f:dd:e0:77:4a:da:dd:51:51:84:cf:
ff:b0:62:8f:46:7e:bd:18:14:2f:ee:f7:cf:30:80:eb:b6:60:
48:91:2d:cc:89:c7:eb:0c:ae:f1:86:d1:54:7f:fe:58:7e:86:
60:64:d1:85:80:45:aa:d2:63:b6:54:0c:08:3b:58:87:ba:a2:
b8:16:b0:11:69:5d:a2:05:56:a3:69:09:18:71:37:de:78:45:
15:b9:f7:2f:b2:e0:b4:53:ef:63:84:c2:42:62:cc:fa:eb:27:
d0:bd:d1:c3:0e:5e:98:0c:b5:ad:47:19:bd:59:e0:d3:79:8e:
75:6d:68:14:4c:34:ee:7b:b1:3b:31:03:01:1b:47:ca:c7:cc:
ff:75:a9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:01:15 2024 by rpki-client on console-ams.rpki-client.org