Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
File: pENNZpHm4nwoLKo3r_kPK8VL8eM.cer (raw, json)
Hash identifier: 7p/umAqtaMZWlTX4dFy8u7QPelhhweXcRbcsGFfphM0=
Subject key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F60D283F2BEC0770B4AC20011609B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.148.112.0/22
IP: 2a07:6040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:60:d2:83:f2:be:c0:77:0b:4a:c2:00:11:60:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:05:0e:d0:70:9f:fd:fa:39:45:94:95:6e:94:
6a:cf:2f:51:d6:2c:65:ad:f1:35:7a:45:e8:74:35:
00:72:7f:f9:8b:12:19:37:6d:57:4e:7c:13:cb:cf:
e4:0a:29:eb:48:cb:66:d1:cf:6d:0b:bf:b6:9c:3c:
de:35:7a:b8:64:64:05:61:c9:91:fb:81:6e:b6:16:
60:1f:86:8a:c0:e7:0c:76:31:dd:da:b6:92:8f:92:
ac:c3:8a:83:dd:66:ad:4d:18:c7:c3:e1:60:18:e1:
04:67:84:37:c6:cd:a4:6a:8b:fb:f3:b4:47:7b:34:
df:09:5d:16:68:21:28:81:f9:2a:fb:13:2c:0a:1b:
6c:cd:42:57:b9:b8:2a:f0:bf:6c:0b:77:50:eb:1f:
12:19:90:1b:cb:26:83:b1:b7:d4:96:97:00:66:60:
1a:3d:e9:5e:c3:89:52:53:ab:20:2a:5b:5c:02:a8:
0e:9d:8e:27:85:2c:93:e1:b3:ed:a9:28:b4:9a:68:
47:47:86:05:7a:87:2c:85:d2:c8:5a:98:e2:5e:93:
3b:6b:a6:57:3a:ca:63:f3:78:74:45:9f:45:76:4a:
1f:e0:96:07:ba:27:01:ec:f4:12:64:c4:f9:5a:7d:
f1:20:c3:4f:48:87:e1:07:40:f1:76:23:55:b2:6e:
74:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.112.0/22
IPv6:
2a07:6040::/29
Signature Algorithm: sha256WithRSAEncryption
30:01:d4:87:c4:ac:31:9b:13:8c:de:ef:57:af:c6:9d:01:56:
b8:dc:b6:bf:f4:fd:19:0c:59:9b:f9:e1:25:23:d2:b6:2a:b6:
9b:55:55:f2:ae:36:d0:99:a3:5d:35:1e:56:28:6c:4d:27:95:
c0:c9:ae:89:03:05:98:18:b6:0c:d8:8b:b2:ad:98:14:8e:15:
49:54:33:b1:07:50:89:d0:64:04:3f:66:18:e2:12:d3:7f:60:
a6:06:94:f7:8e:6e:cc:20:ed:e8:ac:79:85:d8:26:3c:1e:a7:
48:ec:69:33:82:28:2e:82:88:70:ce:99:06:e9:00:8c:c9:ab:
6e:e7:82:03:87:c9:ed:b6:8c:8a:0b:0b:16:45:ed:55:06:58:
0c:ef:cd:05:e1:9a:e4:f9:cb:ec:f1:5e:4f:ae:d8:a0:7c:58:
b7:8b:87:12:c5:ff:03:ef:a8:be:85:d6:c5:48:c8:87:ad:11:
21:11:45:37:57:02:c2:6b:bc:6b:8d:c9:90:ca:e0:5e:0a:5a:
11:06:85:8d:fa:dc:0d:57:32:82:6a:b9:54:8f:20:15:95:4c:
00:d3:d2:3e:ff:b8:48:35:0e:53:32:a0:ee:23:8b:8c:dc:6c:
ed:ed:be:8b:eb:0c:2b:02:fc:70:34:59:28:cd:ee:b6:de:42:
d9:78:eb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:14:30 2024 by rpki-client on console-ams.rpki-client.org