Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
File: pX1M_mD4owpND_lLlOut_IjJrBE.cer (raw, json)
Hash identifier: 4EB3Oc24ThDXEWQ2ejKFke0GuAcEaHdY6qxu/FcR77g=
Subject key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49305930F51B7EBE709E9E9D1031F98
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 31.3.32.0/19
IP: 37.58.0.0/20
IP: 37.152.96.0/19
IP: 46.34.224.0/19
IP: 151.236.224.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:05:93:0f:51:b7:eb:e7:09:e9:e9:d1:03:1f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:65:42:d8:88:e0:b2:24:91:8a:a6:d8:7c:fe:
c8:f7:c8:be:16:21:ea:02:72:45:1b:06:33:af:ba:
25:51:14:4d:d6:23:3f:d1:92:b0:e1:06:a7:2e:c0:
b0:d3:53:1d:fe:e1:77:c9:31:45:ae:9c:6c:24:af:
52:22:ed:6e:b9:8b:c2:bb:d7:85:0c:b6:43:31:ef:
e6:27:5f:ad:e3:a5:54:03:47:06:e6:69:1b:c9:9d:
28:44:41:c2:9a:65:d8:d2:4c:27:a7:98:d8:85:f2:
e0:b3:57:3a:b6:a9:31:05:e7:0a:e2:99:5d:ab:fe:
cf:50:a1:dd:69:5c:14:48:f6:54:26:94:2d:87:c7:
1b:61:d5:62:8a:ce:a4:c4:29:ac:19:ee:a6:cf:e0:
fe:74:f5:a7:01:ad:d6:c1:ff:ee:3d:15:91:60:c2:
d0:23:67:11:dc:20:ac:2f:78:fa:1f:66:3c:eb:f8:
b5:d5:67:eb:16:98:6f:53:0e:47:1a:49:b7:32:3b:
ff:38:cd:af:ed:d9:0f:5b:e3:5a:69:20:5e:a1:8a:
9f:21:1b:aa:ff:c9:88:a0:10:74:4e:31:ef:69:9b:
c8:42:e8:b1:d4:36:85:e9:ed:2a:d2:f8:0e:d8:d4:
f4:d2:d9:6a:e4:37:28:44:fd:df:b4:80:73:3a:71:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.32.0/19
37.58.0.0/20
37.152.96.0/19
46.34.224.0/19
151.236.224.0/20
Signature Algorithm: sha256WithRSAEncryption
27:11:8a:5c:f6:2c:de:f8:36:66:13:95:9d:77:81:d2:23:99:
09:45:3c:c3:53:52:4d:8a:d8:e7:9e:40:83:ae:8b:3b:5a:ef:
c4:e3:33:1d:75:13:44:76:dc:86:43:96:29:f9:3f:28:6f:a6:
43:51:a0:36:b4:7c:53:70:60:e1:bf:1b:d1:9e:1b:01:23:a4:
56:62:14:60:f6:f5:f1:24:5c:5e:2e:cc:5a:48:77:9b:c6:b5:
79:da:ed:22:86:28:e7:4b:dc:28:27:e3:75:89:82:64:20:b6:
a4:6d:f8:ac:33:16:9d:7a:50:6e:94:c4:33:c3:d8:4d:05:c1:
f9:1a:7a:01:96:f8:6e:b5:90:01:3e:14:08:00:52:df:b4:b7:
4b:f7:70:78:8d:70:86:78:95:e4:2b:cd:5a:67:e3:dc:03:34:
56:b0:54:8e:17:7b:00:4f:69:06:b5:9d:83:b7:f7:f1:4d:9a:
91:86:56:b7:c7:7f:9a:fa:73:fd:4a:00:61:a8:03:f2:a9:e3:
3c:9f:1c:9b:d6:ed:cc:35:8b:ce:3a:a5:a4:8e:f1:07:8c:c5:
98:0a:a4:b4:79:ca:cd:0b:3a:5c:ba:12:58:95:4c:5c:5c:cd:
5c:17:df:41:82:9a:5b:93:a8:48:a7:d3:81:ea:7c:aa:d6:90:
e7:a9:1a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:04:07 2024 by rpki-client on console-ams.rpki-client.org