Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
File: rAmEUBCEpHIgxczPVHi4l8KCLH8.cer (raw, json)
Hash identifier: H4gESWnsSo+1HFyzSeHfaHWGq4G2T3fw8z1kI5soIqM=
Subject key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E42E079B65A45D2774554E38D3C55
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.13.120.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:42:e0:79:b6:5a:45:d2:77:45:54:e3:8d:3c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac0984501084a47220c5cccf5478b897c2822c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:e1:cf:b0:87:d0:eb:81:ef:39:38:f8:8f:
c4:be:fe:da:1e:30:9a:20:2c:75:8c:f6:0c:11:16:
0d:5d:fa:a8:e0:bd:dc:92:68:3c:2a:56:de:f0:b4:
6d:85:fc:40:c1:a9:1a:e7:ff:9a:28:b0:f5:e2:23:
13:43:5d:fa:c1:7f:69:6b:aa:8e:32:07:e3:be:c5:
0e:fc:7f:1f:54:f0:33:eb:70:0b:50:53:cf:fa:87:
2b:c4:22:a6:f5:ea:44:9c:87:b1:0d:d5:0f:18:a4:
32:fc:bf:d0:ec:09:2f:b6:58:58:b1:42:0a:9f:b5:
86:d7:b1:ee:e8:43:c4:79:f6:96:a4:ad:89:a3:90:
50:04:7a:b4:28:c0:17:7a:73:53:26:26:1f:f0:99:
30:c4:e3:63:28:ce:20:8b:5e:dc:83:13:0a:71:54:
19:6d:45:36:5c:c4:5f:65:6b:c0:22:f8:88:e6:2f:
5b:08:b1:85:d5:ea:a0:d0:67:16:aa:50:0a:e5:62:
c2:65:76:a5:39:30:ce:7d:c4:20:41:2a:39:bf:d8:
89:51:45:a9:9c:18:8f:da:db:09:3e:76:b1:60:11:
bd:e0:12:d9:15:40:6b:96:6a:56:f0:af:53:9b:de:
dc:65:a1:c9:2b:9b:43:24:ae:06:14:65:8d:c7:78:
39:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.120.0/22
Signature Algorithm: sha256WithRSAEncryption
38:a1:d5:83:be:87:2d:68:98:6c:04:87:48:d1:03:88:85:aa:
20:d4:c5:b4:53:cb:f8:c4:97:6f:b6:a7:9f:ee:80:4e:e2:e3:
11:78:a4:32:fa:fd:72:85:d9:78:49:4d:a0:91:a2:30:d8:47:
5e:36:44:e8:00:b1:ee:98:d0:2d:33:64:fa:f6:98:9c:84:81:
6f:46:57:3f:8d:c7:9b:36:ae:a4:7d:af:39:e6:fc:b7:1e:12:
2d:ac:2e:49:53:15:11:e5:75:c6:c2:7c:84:8f:42:6c:fa:1e:
aa:db:bb:98:c5:ba:8e:00:2b:fe:56:d3:6f:76:8d:9c:d9:19:
0d:36:ac:ef:c3:1f:16:9b:7d:a1:8f:78:f4:6d:2d:d3:f9:de:
10:5c:8a:20:05:7b:d7:f7:be:35:46:b9:e9:4a:26:5f:b6:53:
ad:c9:d9:0a:fd:d1:6f:c3:1f:06:08:6a:a1:b6:71:21:f9:3d:
b3:39:5c:2c:67:3f:51:cb:ac:3b:1e:90:7a:9c:a3:db:14:85:
be:08:e5:e9:a3:45:16:a4:42:ee:92:8e:a4:bd:6a:75:d6:ce:
c5:37:de:95:fb:1d:04:bf:7a:22:ae:36:e2:52:a4:56:b6:4e:
eb:ed:b3:cb:31:cf:7e:3b:72:b5:67:a4:9a:10:d3:77:f0:db:
71:4a:71:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:20:18 2024 by rpki-client on console-fra.rpki-client.org