Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q53IX5TKZH3g22TXTTE5lHzESbo.cer
File: q53IX5TKZH3g22TXTTE5lHzESbo.cer (raw, json)
Hash identifier: +W4OTQLDa2MBwPQ0Q/RxyPbimif+X7J0gkqtrlI/qxA=
Subject key identifier: AB:9D:C8:5F:94:CA:64:7D:E0:DB:64:D7:4D:31:39:94:7C:C4:49:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC2D1EEB98161D0D980E07E74BCB71
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2a0c:6c40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:2d:1e:eb:98:16:1d:0d:98:0e:07:e7:4b:cb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab9dc85f94ca647de0db64d74d3139947cc449ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:93:3d:87:2e:e8:4f:2b:b3:fe:d7:45:66:54:
86:a0:21:0d:46:f4:07:54:c9:f9:7a:16:e1:11:fa:
63:b2:73:01:bf:ed:3b:a3:2a:06:c6:d6:60:b6:ce:
d8:cd:91:47:d2:ea:58:30:6a:77:fc:a9:12:de:11:
c6:ae:e9:f8:bd:a5:c7:c3:68:07:38:60:90:80:fb:
86:b6:70:2f:e9:bc:53:1b:6d:ec:24:9d:a9:32:70:
d2:20:f5:2c:13:17:2c:94:63:41:1f:45:d8:40:b9:
d3:ba:a9:45:62:0e:d6:50:3a:1c:de:a0:85:e2:65:
2b:2a:50:b3:06:02:37:47:a1:d4:b9:1c:df:ce:80:
12:6f:7a:86:9f:19:30:bd:6f:67:23:f5:c3:6d:fb:
58:13:9a:76:82:6a:43:0c:a5:c4:14:a7:1d:74:d3:
49:bb:62:9e:96:34:7d:cb:9c:8c:77:5a:11:17:9f:
2c:70:cb:18:2c:30:06:a8:7b:d2:55:46:17:de:25:
bc:0c:c9:e2:82:37:30:c2:83:88:9c:b5:99:99:54:
00:a6:92:16:58:da:1f:74:e2:4a:8f:38:6a:1d:ec:
19:ad:90:1c:69:86:61:cc:ed:fc:33:0e:df:46:8c:
66:f9:da:c7:f8:52:1c:45:a2:7b:31:ba:0a:d4:3c:
0e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9D:C8:5F:94:CA:64:7D:E0:DB:64:D7:4D:31:39:94:7C:C4:49:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
40:a5:63:dc:85:44:55:1b:33:0c:10:1a:9f:4c:ea:1f:8f:4a:
0f:a1:30:29:76:99:3e:9c:1b:05:3d:a9:ec:a1:8c:c6:4a:0b:
d2:c3:26:d8:66:dd:60:9b:78:f8:97:26:3e:41:4e:7e:e9:54:
b8:99:51:d9:ec:fe:6d:06:77:f0:20:11:5c:cd:ce:d9:34:a4:
32:65:f7:73:df:fb:9f:e2:c5:14:70:36:73:8b:d3:33:2c:e2:
c4:fb:5f:d6:1e:59:56:6e:bc:a4:e4:0b:e9:33:52:f8:ff:78:
1b:33:ab:ca:41:45:4c:1a:a8:11:62:ba:dc:27:c9:b4:69:b7:
bb:b2:ac:c4:05:d7:6b:92:f4:da:0b:e0:5f:6d:fc:0a:b3:bc:
e4:83:ff:bf:30:66:6b:3f:23:16:17:ed:5f:7c:b2:0a:08:91:
d3:60:2c:37:af:7c:8d:85:4e:bc:19:e1:6b:9a:84:4c:31:72:
ec:8c:a0:05:7e:90:7f:b4:65:83:d1:00:83:cf:78:56:dd:ec:
92:d4:f2:38:72:71:96:db:e1:6f:90:a9:e5:e1:ff:05:ef:21:
c7:22:0b:84:5a:9e:b4:b5:d4:c6:ef:7a:18:28:c2:f3:04:02:
a5:97:e9:56:4f:f9:71:a4:f3:66:a9:9b:24:02:f0:dd:be:4d:
65:75:f9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:15:00 2024 by rpki-client on console-ams.rpki-client.org