Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
File: mZKB6H1em4dY8kDnju9xAsQBIYk.cer (raw, json)
Hash identifier: E03uwB0fCvrHJORXX++U9BLohq7oFJvJFju4W2pK3Rg=
Subject key identifier: 99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAF01AA280FB8664293080E7B21E7F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 141.54.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f0:1a:a2:80:fb:86:64:29:30:80:e7:b2:1e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=999281e87d5e9b8758f240e78eef7102c4012189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:31:9d:04:33:c0:06:da:ae:fb:d0:bd:32:
55:7e:da:6c:26:fd:69:c3:ea:76:ce:0b:54:95:29:
92:f4:ed:9e:e3:63:cf:3e:37:44:8b:96:77:97:04:
48:87:34:26:ad:df:3c:ef:14:a9:ea:e8:16:4a:7d:
d2:29:69:97:f1:b8:1c:18:d6:a7:f0:b9:8e:ca:68:
0a:0a:8d:1a:a9:84:11:fe:8c:55:03:df:57:cf:d4:
43:28:4e:5c:60:9f:0f:ac:74:60:cf:ed:84:d2:a9:
4e:36:9d:25:b0:c1:b7:e2:1a:24:71:3e:61:3e:42:
5c:1b:ab:50:35:07:08:77:d6:9f:52:82:de:6c:14:
64:49:78:22:5f:8c:00:a9:dd:4d:fb:1b:91:2a:e6:
50:01:ad:3e:5f:05:25:60:b3:94:d1:dd:da:91:4b:
32:26:ab:51:03:d7:be:6d:d1:c0:1c:4f:3c:6e:82:
7b:0e:38:b0:87:3a:2c:83:32:cc:84:c8:0a:92:6c:
f2:70:d8:ff:48:37:86:25:17:bc:90:3e:13:36:7c:
f3:f8:b2:1d:94:86:cc:77:de:6a:ba:68:2a:29:02:
67:88:9f:9b:e5:a9:87:76:90:be:94:3b:79:6b:57:
46:18:ad:d0:69:f0:57:48:ec:32:83:4b:1c:76:87:
11:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.54.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:62:56:3a:c8:dc:6f:4b:d7:85:76:81:4d:40:55:1d:12:fe:
59:c9:66:07:d9:6b:d6:d2:92:7d:48:3f:c3:69:28:78:b7:2f:
9c:5f:dc:ce:bd:38:0c:bc:1e:ec:1e:4d:50:5f:47:de:a0:90:
33:39:ee:7f:c0:1c:09:4d:b6:28:d0:80:70:22:47:bd:d2:19:
b3:03:3c:5e:d9:86:15:c7:f2:c1:e0:4a:75:17:e9:c7:13:bd:
c7:b4:11:7c:3f:17:39:1e:48:68:f0:43:f1:32:f2:92:68:ca:
98:80:ef:a6:41:39:0c:5e:1b:08:b0:6e:be:91:d3:b9:b0:bc:
7e:53:cf:60:72:22:2e:d5:f7:2f:70:ef:05:8e:2d:f1:ba:09:
76:3e:d2:92:28:de:ee:65:4f:23:08:37:d7:7b:fa:cf:af:52:
91:9d:db:5d:66:52:ef:a2:f4:0b:64:47:7d:95:dd:63:f5:b7:
fb:92:dc:8d:49:96:a8:5f:67:fa:52:0f:02:c8:8f:15:e6:2f:
84:69:7c:1c:fc:a7:ce:d7:9c:26:7b:d4:b0:44:83:2e:04:42:
7e:18:ca:33:e7:59:3c:f5:26:21:a5:29:51:25:f8:ac:0f:4d:
a3:61:67:12:79:f1:02:23:ba:59:c8:fd:84:b5:00:b2:b5:a7:
8c:ec:6c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:56:48 2024 by rpki-client on console-fra.rpki-client.org