Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
File: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer (raw, json)
Hash identifier: 8haM4hZwAlF0VxPfpJvXj59Pvte8wGWlniStgfMOR9U=
Subject key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB3DEE3AD044E35B4B2C4403035615
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.143.77.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3d:ee:3a:d0:44:e3:5b:4b:2c:44:03:03:56:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f9:07:32:dd:3d:75:d4:9f:35:c3:dd:5f:aa:
f8:af:52:ba:7d:b0:3a:2c:43:a8:9b:a5:37:9d:ec:
d4:6d:39:68:87:b7:f9:30:e8:e3:f4:5a:86:13:f9:
ea:a0:4e:7b:f8:7a:75:df:b6:d4:ab:3d:a1:25:3d:
71:ad:b9:93:c5:f4:dd:da:c1:28:8b:18:7f:c6:d8:
52:90:d2:98:23:56:1f:38:44:e2:ba:66:23:e9:f5:
a4:46:76:57:74:3a:7b:b9:df:7a:74:4b:b9:a8:e5:
af:e8:9d:d0:a0:c8:1c:9a:aa:82:44:67:4b:45:4e:
78:83:fd:6d:b2:e6:ff:32:10:56:00:38:2f:a2:db:
d6:c9:1e:9a:60:24:12:54:e4:85:c8:92:fe:c1:41:
9e:52:d4:32:54:ff:e7:ef:a7:70:e2:4e:1d:e1:70:
1f:4e:3e:56:47:28:73:92:d0:a1:41:12:1d:28:6f:
43:25:e1:c7:55:d5:2d:7a:d0:48:73:41:a4:a3:46:
41:c8:78:3e:eb:a1:19:f8:07:10:b5:ac:6b:e1:e8:
76:5c:34:64:e8:c6:86:7a:33:7c:19:c3:bd:d5:16:
c8:f2:4f:92:b8:b2:2e:28:4b:94:13:47:4a:d6:b7:
7e:2b:56:36:fd:3f:05:41:42:b2:97:f6:65:df:fe:
e0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:0a:43:84:f0:97:ac:3b:21:cf:89:18:57:54:d6:7b:ae:cc:
78:e5:22:f2:2d:5e:53:5b:a0:a7:d8:7e:33:cd:74:6c:06:5e:
e1:27:b0:62:9c:4a:cf:8c:ff:45:0c:93:6a:9e:9a:8e:a1:5d:
68:17:bf:b7:70:0e:cc:7c:aa:04:12:e4:3e:3c:b3:75:68:3a:
6b:95:13:1e:04:69:be:ef:73:4c:fc:32:10:dd:31:15:6e:e6:
b3:ff:4e:74:16:93:f7:2a:2a:92:7a:10:3c:7d:5f:0d:27:a6:
55:12:6a:c1:61:b0:5e:0f:1c:c8:6a:d2:d8:aa:39:24:e3:0e:
e9:37:41:25:d8:38:02:32:a7:88:d5:fb:1c:60:0e:a6:cd:38:
ee:a8:97:90:92:f0:40:47:35:09:f5:2f:2d:c6:6b:97:cf:34:
da:63:33:c6:68:d7:a4:55:12:32:19:51:ff:9b:0f:6b:dc:bc:
ed:0c:29:35:a7:5e:dd:5a:1c:af:4b:f0:15:94:46:63:6b:b3:
8e:b0:4b:b2:c0:70:6c:bf:bd:0b:8e:dc:45:3a:ee:81:11:7f:
d9:c0:dd:a1:f8:3e:b2:55:e5:fd:99:28:99:a7:2d:c0:f4:bc:
16:83:06:b5:97:51:a3:fd:4f:04:2a:27:f9:20:6b:11:cf:47:
06:dd:2a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:14:28 2024 by rpki-client on console-ams.rpki-client.org