Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
File: pJKfzWHcadzPvgHV_wA1tBrJUmA.cer (raw, json)
Hash identifier: C6pcP50MTRE1W77iyEsf3BcOzrBfnZXhGgO+UUM9JdA=
Subject key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42478B07AFAE720AB1F97A51C5BC6B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.150.16.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:78:b0:7a:fa:e7:20:ab:1f:97:a5:1c:5b:c6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:b5:f7:8d:95:28:a6:ac:43:84:b9:78:a1:
7a:e4:03:61:69:66:9a:8c:15:0d:bb:cd:6c:30:f3:
11:08:22:09:9b:26:e2:cc:3d:e9:26:2d:d4:f1:db:
0b:bb:72:9f:21:a8:65:92:72:2e:14:9d:45:37:51:
fc:97:21:01:99:b3:ad:27:3b:da:57:f9:13:e0:52:
0e:ce:53:fd:2c:5a:2b:5a:e6:92:bd:ca:2a:47:42:
44:66:67:02:74:5a:d6:00:50:df:f2:98:55:25:61:
d7:85:a7:2a:f2:f7:4e:1c:a6:a0:87:d3:84:4f:07:
c0:ab:e5:86:a9:24:85:7c:5e:aa:a7:7f:8d:65:cc:
09:ca:9f:15:0b:5c:cf:e4:10:70:e6:9f:c5:b5:a9:
2c:64:11:ff:64:6e:5f:33:70:2f:1f:a0:41:c3:f9:
63:29:2e:68:44:72:da:d2:cb:17:9f:00:d1:c6:44:
77:7c:59:fc:9a:12:a3:5b:dc:9f:75:0f:04:57:e6:
d0:78:e4:7b:e3:db:f9:45:0b:c4:35:da:54:7b:43:
ac:de:72:9d:88:03:a9:2d:de:e4:5a:b0:86:52:3a:
ec:5d:d7:f7:2b:f8:e3:86:a5:8d:b1:3b:96:cb:e9:
eb:0d:31:18:6c:3f:fb:9d:c4:ed:e0:f9:5f:e0:a2:
b8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.16.0/22
Signature Algorithm: sha256WithRSAEncryption
39:72:52:9a:e2:d8:1a:7b:f7:75:b4:48:ed:96:f5:62:db:38:
92:63:85:99:6a:58:d2:ec:0a:bf:d0:be:f8:c6:7a:50:76:f0:
89:87:76:28:a3:25:40:e5:f2:9d:60:e5:1f:fb:37:1d:94:c9:
3b:37:0b:e0:b5:e8:99:d4:70:d8:4c:da:fb:6b:e3:cf:20:8a:
fa:7b:f0:2e:03:4a:1c:2e:ea:b2:68:0e:3e:04:0d:f4:f1:fb:
51:24:41:f2:8e:b6:63:ba:18:d2:d7:98:52:29:08:36:d5:69:
3e:0a:f8:77:19:77:e1:cc:47:53:be:6a:0f:16:99:8f:8b:2b:
89:9e:de:a7:8d:dc:47:4b:53:ba:47:80:8f:dd:ad:b4:d8:c0:
76:ce:6b:85:c1:4d:b4:bd:d7:18:e6:50:2d:04:7a:8a:26:9c:
a5:03:b9:94:c9:73:78:99:4d:8e:cf:36:ec:45:76:94:32:ad:
15:45:02:da:d0:4d:d2:fd:3c:8d:a2:f3:d9:ee:c3:92:93:85:
24:51:ea:8f:7d:14:8c:4a:f3:51:5b:c1:d1:7d:2d:90:8c:97:
b3:df:56:05:41:3e:7f:01:18:f3:9d:ea:aa:c8:8c:e6:9e:96:
1a:32:2b:55:17:7e:2c:b2:40:fe:ae:fe:25:01:03:ba:67:dc:
c5:c3:25:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:11 2024 by rpki-client on console-ams.rpki-client.org