Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
File: mnj9TUGkk4S99ufcPrvFAL9m2dU.cer (raw, json)
Hash identifier: 9hVEPCw7rE8HX4e9hX8X+rsQ8x2m8i+OKW4qtvn1M4c=
Subject key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DCC60DDBFDC703710EB671851E2C6D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.8.84.0/22
IP: 2a0e:5200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:c6:0d:db:fd:c7:03:71:0e:b6:71:85:1e:2c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:37:47:3a:9c:fb:3f:02:a2:b7:15:cf:9d:e2:
62:d4:a5:74:b7:e8:93:4d:65:0e:08:40:87:95:c2:
e9:a9:66:cf:e1:df:eb:0e:60:45:c1:91:ce:25:69:
ff:31:fb:e9:6b:41:3b:3a:b3:4e:42:ac:d0:be:6a:
a9:ec:48:45:b3:45:40:17:21:d9:dd:06:23:28:c5:
67:e5:7d:65:b8:fe:59:4f:f1:d7:9b:f8:80:65:cb:
2f:0c:00:9e:27:65:e8:76:c1:de:16:fd:71:1c:a4:
a5:a9:03:85:f3:a3:02:5d:2a:a5:0a:1f:75:10:f4:
1d:4f:53:20:50:53:6d:eb:bd:3b:8d:30:bb:e3:4d:
1f:db:04:99:bf:a7:5a:c5:78:43:86:c4:92:bd:e6:
04:ae:ff:a2:71:c7:84:2e:2c:4f:ce:1b:7c:86:c4:
f3:99:33:e0:f5:2c:13:f5:7f:21:f1:f9:af:e6:15:
7e:a0:bb:36:45:4d:c5:78:19:88:11:ab:3f:4c:7e:
c4:3d:62:05:77:83:57:66:01:7d:ee:dd:e6:87:9a:
c7:cd:4a:09:79:f1:da:0e:25:d5:f0:e4:82:5a:47:
fc:4f:a4:89:11:01:16:80:f5:63:0c:52:83:a9:68:
6d:69:30:23:18:99:65:65:3c:e4:a8:26:60:bf:75:
66:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.84.0/22
IPv6:
2a0e:5200::/29
Signature Algorithm: sha256WithRSAEncryption
91:d2:a9:95:b4:f7:7f:53:e4:ea:4d:4d:67:05:63:14:eb:c4:
f7:95:28:7d:90:99:5d:97:7f:6b:40:6e:d9:ff:c1:c7:27:f9:
51:92:37:1a:1a:8a:a1:3d:f0:ad:30:16:a2:ad:1b:d0:f7:e8:
7c:df:22:a5:9d:a9:0a:39:31:01:6f:47:a3:2d:29:c0:59:48:
80:a5:b3:54:af:89:c0:e1:d5:e8:e7:0b:79:f5:0e:cf:28:2f:
fe:e7:72:86:76:40:02:77:59:2e:9b:ba:95:35:11:5c:dc:ae:
5b:63:8e:15:8b:76:e8:52:b1:7b:eb:d2:2e:87:53:58:1a:97:
0a:e2:22:55:5d:d5:88:e2:56:68:ee:1d:5d:fd:9f:39:5a:cd:
ef:26:87:74:bf:8d:41:99:ba:7a:bc:a8:89:c7:6d:ff:05:13:
8f:99:1d:34:d8:d3:03:d8:29:15:66:ee:8f:b6:dc:fc:cb:4c:
28:39:54:e8:cd:bd:fa:1e:68:ce:d9:d5:0b:35:3a:ce:b3:2e:
37:d0:5f:c7:b4:3a:51:f6:17:76:88:7d:e4:f4:7f:08:32:76:
ea:56:5c:a6:2d:d0:03:a7:e0:75:df:ef:c2:2e:d6:fe:71:c7:
9d:02:79:38:7c:f2:5a:cc:ad:16:68:37:31:7f:ef:6f:9a:af:
2a:36:a2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:01:35 2024 by rpki-client on console-ams.rpki-client.org