Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.cer (raw, json)
Hash identifier: B6JVDBeWpyReVte8bknY0rHJBcQFWuAajuIabHMnnMk=
Subject key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348BD6D750BC1FE9E344F2A328EA341
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.210.232.0/22
IP: 185.43.232.0/22
IP: 193.36.43.0/24
IP: 2a01:6ce0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:bd:6d:75:0b:c1:fe:9e:34:4f:2a:32:8e:a3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f0:5f:9d:ed:9e:54:b7:d3:57:2c:10:07:a7:
d1:7a:e8:1f:34:6c:58:29:03:e0:c6:6f:50:bc:24:
86:f3:23:de:b3:8d:f0:72:57:ae:d2:a0:a0:86:bd:
9a:1d:b7:75:bc:f6:1b:8f:93:9b:51:f2:f5:36:50:
f9:68:1c:28:8c:df:b3:24:0c:d3:3b:6f:0b:d2:fc:
7f:58:d4:3e:18:fc:d5:02:e4:f1:2b:b8:61:bb:95:
8b:76:7c:a2:fe:6b:1e:8d:d3:0f:14:27:35:9d:fb:
e0:73:da:21:91:ea:47:be:43:4d:54:80:09:24:73:
ab:cc:23:e6:50:d3:30:bf:8d:a2:64:66:1e:ba:bd:
d1:77:f2:7b:44:10:6a:aa:40:47:52:e8:a1:a4:10:
96:65:f5:de:c3:28:3e:69:53:47:b7:29:bd:89:a0:
30:bf:1f:7e:33:9a:79:f8:d9:c2:23:7e:e0:07:17:
30:46:8d:fd:7f:fb:3c:cf:f8:f9:f7:6e:c5:1c:f8:
97:8f:35:7e:d7:83:16:16:1f:40:e8:fa:4b:f2:35:
7f:a4:8d:fe:1e:52:f3:b7:e1:19:62:81:4e:40:6a:
74:47:d0:1d:8d:b0:b9:2e:60:20:b0:94:0f:0f:da:
8a:74:40:13:70:69:24:82:fd:15:12:06:0e:0b:8b:
de:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.232.0/22
185.43.232.0/22
193.36.43.0/24
IPv6:
2a01:6ce0::/32
Signature Algorithm: sha256WithRSAEncryption
02:74:41:f9:9d:5c:d6:f6:f6:40:52:0e:e2:67:3c:fa:d3:0d:
5b:bc:63:54:6a:a6:96:0e:97:31:05:30:3e:cc:31:49:aa:3c:
d3:2a:25:6e:2c:a7:c4:2e:25:f7:c8:96:23:1f:44:65:5d:d7:
55:7c:11:9c:09:6c:23:93:c1:64:c3:a8:a4:1d:78:48:d3:fd:
cb:65:7c:d7:16:c1:6f:8e:11:b0:f3:0e:a9:c3:27:b1:1d:a9:
c7:eb:5a:b0:a2:f4:5b:74:13:89:5e:7d:08:8c:7f:ea:81:64:
52:40:c6:fc:20:a7:d8:95:44:cf:80:ac:ea:cd:ef:9d:0f:63:
cd:4c:d3:9f:f4:85:ff:70:27:27:86:21:8e:2b:f0:16:49:7e:
91:12:96:e6:fe:c7:f5:c6:47:dc:95:b8:e7:0d:77:4a:f8:2e:
71:ca:77:e1:31:31:f5:bf:99:a9:4a:74:94:e3:a9:0e:e2:71:
61:67:46:db:c7:92:bf:5a:d3:f8:e0:23:72:d1:1e:7d:a2:96:
d0:08:dc:e6:51:af:cd:fe:22:ba:33:92:2c:db:f2:17:c7:56:
cf:4a:d3:c7:f6:a0:1b:46:fe:df:ea:42:24:8b:b4:eb:a2:45:
a4:7b:bd:99:8d:f6:d1:62:4d:45:7b:76:fa:4d:46:bc:77:a2:
44:db:d2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:58:44 2024 by rpki-client on console-fra.rpki-client.org