Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
File: p-7aZdzUOH1yJwBcHhOgbUSHe28.cer (raw, json)
Hash identifier: 1mfeKKtIB+4G19BvuhBo6iTNHCtTAPGV9rxRqtQESFg=
Subject key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EDEA731655CE58F99C421AC3A9C69
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.177.148.0/22
IP: 2a0a:3d80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:de:a7:31:65:5c:e5:8f:99:c4:21:ac:3a:9c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:71:8a:b0:98:2f:bb:b4:d9:b7:6b:17:86:
98:86:f4:06:07:06:d4:4f:14:c7:01:c4:6f:0d:04:
00:3d:62:49:2d:de:a6:95:02:6d:b2:ea:bf:52:07:
25:c6:c1:98:7c:d3:2b:f4:7d:ab:7c:fe:67:99:04:
f5:cd:12:ea:ef:6d:0d:04:67:4c:f8:f7:13:ef:03:
f2:69:c5:32:00:9a:f7:ef:35:78:15:73:2b:8a:d7:
d0:7f:d5:b7:ea:b1:63:08:53:e8:9c:ce:7d:ef:1c:
8f:4a:49:c4:30:54:17:37:11:2f:1e:35:3d:9a:91:
5c:f7:89:d6:d1:dd:c7:ea:f7:a0:82:26:16:97:5f:
36:65:87:cb:49:4c:d9:96:bc:54:c3:65:14:40:21:
b2:ce:a1:70:31:1b:f5:01:0a:a2:2d:61:ae:e6:be:
7c:43:4f:42:84:ed:22:1d:6f:20:a7:e1:9b:3d:15:
cd:79:ab:20:63:c6:51:aa:0c:9f:24:d7:58:35:16:
49:21:6c:54:15:ce:d6:f4:d2:b8:27:c1:73:ec:c7:
85:56:3f:ed:b3:00:8d:fb:23:83:ed:69:b8:9c:aa:
d6:d1:52:6a:c3:4e:b7:af:e3:dd:4f:3a:7e:ae:30:
62:7c:90:db:62:4e:28:d6:41:7b:f6:12:1d:4a:fb:
4f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.148.0/22
IPv6:
2a0a:3d80::/29
Signature Algorithm: sha256WithRSAEncryption
57:46:5c:11:75:cf:45:a5:f1:67:6c:1c:9e:7f:46:c0:a8:0c:
7c:9b:46:cd:ca:8d:0c:6e:4e:c8:a9:2b:da:d2:b0:94:ad:73:
c0:d7:8d:bd:92:06:d9:91:a7:59:e6:58:97:8c:e5:0a:f3:c0:
85:5f:09:aa:78:3a:64:d8:cb:d7:f4:3f:b7:6a:65:a5:cb:ad:
b2:4c:f2:c7:91:3a:db:19:ee:de:c9:1a:b5:be:36:eb:cf:06:
8e:e4:1b:15:77:38:81:cf:3c:17:52:05:39:14:dd:28:a7:38:
15:f0:e5:e8:84:43:cd:f7:c5:66:b9:db:c3:2b:09:3c:c2:c3:
4e:13:26:f3:68:7c:38:da:b8:39:53:a5:2b:df:18:de:ef:ed:
15:35:ae:4d:85:77:a7:bc:c3:f6:cf:19:27:08:01:80:1f:7e:
9c:04:84:b7:2c:6c:93:47:52:a6:3f:d3:52:1c:4a:de:e3:8c:
58:36:d1:42:95:34:b8:43:86:54:55:00:81:0b:0b:78:5a:29:
29:27:a6:49:68:96:e8:dc:ae:04:6c:bc:74:7d:15:be:c2:93:
a0:af:02:8b:21:db:4c:d6:18:21:91:ff:b6:3b:ec:fc:6a:a2:
b8:b3:1b:c1:d6:6f:45:9b:28:58:ee:45:7c:e6:bf:de:b9:24:
81:68:91:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:18:18 2024 by rpki-client on console-fra.rpki-client.org