Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
File: r1vEnV8BojWvkonPSSav_vevkrA.cer (raw, json)
Hash identifier: 4EJoEE638XdHKThJwAayWqhYgoGgL7JTqztS1meAnE8=
Subject key identifier: AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94AC31DA9F79D68B1DB069CDE300C9F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.254.172.0/22
IP: 2a0c:5140::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:c3:1d:a9:f7:9d:68:b1:db:06:9c:de:30:0c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af5bc49d5f01a235af9289cf4926affef7af92b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:c7:e2:51:bd:37:58:cb:98:66:19:39:32:
03:7f:0a:21:63:25:1c:df:81:fc:22:6b:33:64:74:
62:c2:4c:7c:5e:14:4a:9a:49:37:94:93:be:e8:12:
64:e9:00:f4:0d:56:e7:cb:8c:b4:ca:4e:d3:60:24:
df:51:07:10:c4:da:ce:30:2d:6a:7a:87:c4:59:26:
24:f7:6f:18:45:8a:9a:b4:76:33:be:9e:49:47:08:
f4:58:ac:4b:16:0e:9c:2c:03:50:ed:a5:23:6d:37:
1e:84:25:2f:80:e6:04:23:9e:a2:77:99:c4:e2:bd:
09:53:55:48:f7:eb:9f:1e:4c:be:81:41:d9:59:df:
d3:dd:a2:40:90:df:66:a8:2a:cc:7f:4a:d3:86:6c:
8a:03:a9:62:0a:30:dc:ad:b4:68:b5:5a:1e:b0:20:
41:ca:49:a2:2b:a9:db:18:12:ba:8b:57:bb:81:9a:
e6:bf:af:b8:66:6b:74:dd:a4:c8:43:ac:19:62:07:
82:43:22:a2:2c:95:f0:d2:33:a1:5b:46:af:50:c1:
cf:dc:42:48:c6:8d:5b:cc:1c:3d:4f:ab:68:fb:20:
77:89:d1:48:44:9d:78:8b:a9:7a:a3:2e:76:3e:ed:
95:4f:b2:a0:bd:9e:1a:5f:17:3b:78:be:99:18:5a:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.172.0/22
IPv6:
2a0c:5140::/32
Signature Algorithm: sha256WithRSAEncryption
07:b6:0a:bc:ae:68:1d:2a:8f:aa:0c:a4:0a:a0:f8:7e:b5:fe:
d1:c3:7b:95:80:68:2d:a1:29:a9:22:2c:99:72:8e:e7:4f:71:
52:11:a4:40:7f:97:ac:15:ca:b1:a1:bf:f7:d3:73:04:1a:64:
c5:66:40:94:4b:0a:3b:62:60:19:34:6c:fc:43:a6:8d:1c:4d:
47:e9:ac:db:79:e6:ba:69:4e:e6:4c:18:b3:ab:90:a8:f5:2e:
22:98:79:b4:03:a2:5b:07:26:47:0d:84:43:b0:7d:08:c4:6b:
bc:3b:bc:79:7b:0e:22:fe:9e:3d:6c:7e:8a:6f:67:23:33:25:
45:96:18:71:bf:1a:75:ad:5b:bf:f7:29:02:cf:ce:f5:25:92:
02:b6:53:0a:8c:36:2c:68:70:91:13:a8:b5:6a:84:01:50:24:
db:2f:e3:2e:5c:ff:37:4f:af:70:50:cc:de:0c:e0:35:55:cb:
36:d1:1a:e1:2f:a3:8b:30:45:dc:1c:c5:4f:7f:f3:85:e0:17:
17:d1:86:89:0c:e2:da:57:4c:e0:c9:8e:fa:64:04:ae:9b:8e:
0b:6b:cd:7d:b6:a4:18:65:4a:d3:73:cd:f7:87:d2:ce:4b:46:
57:55:b3:95:6d:ec:28:4a:63:9d:b9:6f:ac:7e:3f:9d:33:20:
05:eb:33:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:20:11 2024 by rpki-client on console-fra.rpki-client.org