Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
File: peC5TwtOTIRu-c8nzciBEIdrHPM.cer (raw, json)
Hash identifier: C5eKEQBrc77Axx26SAc+5B5+Pyn6kpQgI8xlrP9cp3o=
Subject key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72773FE78CDA2EDCDF5261E26210E80
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.117.244.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:73:fe:78:cd:a2:ed:cd:f5:26:1e:26:21:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e4:5d:11:dd:61:5a:7a:17:2c:62:e2:0d:f8:
2d:0c:d1:27:12:a0:97:a2:9b:ad:cb:87:53:89:66:
a2:ff:9c:96:40:23:0f:3a:fc:50:7d:df:5a:2f:01:
c1:20:9f:98:2d:1e:6a:2b:93:df:7f:05:67:6e:45:
c2:32:65:7b:19:0a:2e:fb:48:45:ff:ab:88:d1:35:
b2:eb:e4:65:93:2c:c0:72:6a:a1:f8:11:42:d0:1e:
f9:b3:b7:e0:c0:1f:6c:82:75:b0:4e:fa:97:c6:fa:
f5:a8:b6:c8:44:e5:2b:b5:b7:f3:1e:6f:14:54:8d:
6f:36:5f:72:50:78:4c:dc:1f:a9:96:b6:13:b0:40:
db:e0:69:54:38:00:a6:41:6f:ec:c6:a4:0a:30:b7:
19:25:9b:ca:2a:bd:e8:0d:ca:df:34:45:72:cc:4e:
6b:60:5d:26:85:23:3b:05:3a:5c:e0:3d:a8:da:5e:
8c:32:39:51:e2:3d:79:bb:03:41:2a:90:a4:02:f1:
4b:99:60:43:fb:fe:cd:24:58:ce:ce:df:55:be:36:
de:a6:47:7b:26:d3:48:a7:17:e2:14:90:38:c5:5f:
65:e4:bf:63:c8:87:e4:6a:99:91:be:d3:cc:bc:cc:
fc:18:f8:f3:1e:82:fd:61:e0:0c:62:09:26:07:53:
10:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.244.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:03:df:11:6b:7d:c5:1a:e6:5c:07:49:b0:94:63:44:c7:70:
d4:61:3d:e9:51:92:fc:0a:2e:11:55:bd:d7:90:74:5b:4d:43:
da:17:f7:24:3b:a0:65:b4:fc:f5:08:e0:5e:94:59:d3:2f:ef:
96:64:bc:93:2e:6d:38:de:16:e7:0a:0c:c7:0e:ef:d5:22:48:
cb:f5:24:d7:f3:97:72:8e:44:0e:03:73:7f:4a:e2:17:7c:10:
b3:77:6f:b2:9b:36:3e:14:99:6e:21:38:50:cf:76:30:4d:8f:
d8:bd:fb:6f:a6:74:a3:47:5a:24:88:bc:37:62:c7:d9:b0:9f:
6b:93:44:dd:8d:53:c3:1f:94:7e:d2:8c:a5:4c:b9:8a:0d:5b:
7f:5e:7c:5a:b0:a2:13:39:5e:7f:c3:7e:e5:b8:06:38:4c:15:
10:37:89:3a:f9:48:2b:07:cf:db:36:e5:1c:65:28:93:59:7c:
35:e5:15:56:13:13:74:35:fd:95:42:06:63:7d:99:7c:22:37:
c2:a9:90:78:aa:7b:8e:d7:6c:e2:12:b4:ff:7d:a0:e0:4a:2c:
44:3a:4d:5a:d7:3b:e0:32:a5:6a:44:fd:22:77:e5:c9:55:c4:
8e:68:64:1a:5e:47:0e:e8:bc:f1:52:20:67:a4:f1:c9:46:97:
ce:a4:fa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:44:00 2024 by rpki-client on console-fra.rpki-client.org