Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer (raw, json)
Hash identifier: nBu5xLd5Vp4rG9bSivpv4UG+AH33Q3VbSzi7zAEjubc=
Subject key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DC722DC1724508008BEE6786870B84A07
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 Feb 2024 15:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 156.118.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c7:22:dc:17:24:50:80:08:be:e6:78:68:70:b8:4a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 20 15:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a69749fa2337db33a76474eb812c034e30509d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:de:a0:ef:96:19:ab:16:48:df:59:8f:d5:60:
0e:3f:1a:4a:19:b5:c6:67:a6:09:a4:77:0c:45:2f:
aa:d7:d8:83:6e:bb:dc:45:6c:91:63:d5:c1:79:bd:
88:30:bd:a8:53:db:c7:b7:46:4e:ad:fe:dc:85:c7:
c0:b5:9f:ae:1a:6a:75:8d:cb:63:e1:59:90:d7:cf:
55:5c:bb:63:00:94:83:00:38:61:0e:5c:6d:c3:b4:
95:e7:52:a1:c6:ac:87:db:fd:48:27:9a:19:a6:33:
55:80:4b:1f:11:26:0f:c1:9e:b8:01:7c:96:12:16:
1b:7a:63:47:53:66:2a:3d:1a:c0:c1:05:af:63:26:
fb:4e:42:48:9a:22:84:d7:a9:21:a4:d2:d7:14:a0:
07:02:71:56:7b:63:87:2c:0e:6d:aa:ec:ef:5c:a3:
b8:30:be:e0:c8:02:cb:be:61:ad:b8:0d:45:f3:e3:
fa:d4:3d:8d:cf:36:28:09:22:20:be:29:d3:6e:86:
97:06:f2:f6:88:d5:08:e3:a5:be:e6:fc:b3:db:04:
3e:e0:07:a8:c0:b4:bd:b9:15:3f:45:c8:8a:55:0a:
a3:56:75:c3:6f:20:45:f3:dc:d9:c7:3f:4e:da:52:
4b:3d:cd:7e:eb:85:a2:75:30:ad:2b:99:34:2c:16:
16:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.118.0.0/16
Signature Algorithm: sha256WithRSAEncryption
64:8e:5d:fc:74:54:8b:65:df:05:a8:e5:28:1d:a1:26:45:c4:
39:a3:be:57:cc:ae:dd:d8:2a:10:05:d4:22:49:48:ed:14:d3:
b6:84:bf:c6:0c:47:dc:6b:d7:96:5b:6b:d3:fa:ef:83:86:7a:
c3:c0:3d:7b:fe:13:e9:aa:35:23:cd:70:44:32:2c:75:0b:6e:
74:2b:f2:09:ee:91:8a:26:81:f6:ce:28:ed:ea:bb:1f:ab:e4:
f9:d5:be:fa:27:f0:4a:f6:3b:7a:a1:d1:2d:df:3c:58:09:dc:
4d:3e:3d:60:a6:19:2e:7e:98:5a:e9:49:64:bc:21:ed:b4:cd:
20:2c:5b:70:8a:77:2c:48:14:80:6f:37:90:48:87:aa:18:4e:
21:d2:d5:e9:4c:d4:10:ff:f6:b6:c1:9f:35:28:90:94:bc:84:
09:73:34:ea:f5:66:cd:9d:87:8a:b9:fa:81:96:0f:e8:c9:3c:
49:53:cd:40:1d:7a:74:25:25:55:b0:85:00:86:fd:a9:f8:c2:
ee:58:65:4a:53:51:b9:02:5f:27:d8:56:78:7c:69:c9:0b:99:
4a:2e:d2:78:ee:58:cd:d9:89:d3:14:a5:c7:ac:c4:a5:55:c3:
1c:26:d0:9b:e2:43:b9:0a:bb:f2:09:e6:84:0a:05:0f:9e:19:
f0:ea:78:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:30:29 2024 by rpki-client on console-ams.rpki-client.org