Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
File: rdJhytDf8tm7L4x60Nsm7Vcw090.cer (raw, json)
Hash identifier: DytfNVMkGHWfZ1fdc+vuXjHGfT9HPltwF1BKvrZeGAU=
Subject key identifier: AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D458362D81A402B2372322DF6114E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.138.252.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:45:83:62:d8:1a:40:2b:23:72:32:2d:f6:11:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:05:24:1d:0a:ad:cd:94:fe:97:38:ac:cb:
0f:a4:11:7f:96:d6:f4:5d:23:37:1a:87:10:8f:4d:
6c:6b:f0:e4:f7:a8:bb:9e:7a:1e:be:9e:4c:15:a9:
77:ff:e0:a7:f7:05:83:36:e7:79:e1:59:12:20:7c:
6d:6f:1a:47:a4:47:a9:ff:a5:ff:59:54:2e:5e:cf:
92:56:6c:6b:57:b4:7f:a1:75:c5:34:e2:00:fe:5d:
93:5a:96:2b:5a:7c:77:8c:97:59:13:f0:75:76:08:
bc:94:20:6b:2d:8b:d8:0a:67:53:07:9f:0b:75:2e:
bc:25:81:73:21:d7:c3:22:cb:06:19:18:d4:c0:d0:
71:a4:fb:1d:32:b0:51:b1:50:75:f8:5a:1d:9c:20:
68:88:62:12:de:18:0d:cf:15:36:e7:9a:8a:ed:4f:
69:2e:2d:55:e9:70:d4:ad:92:e6:03:38:bd:80:47:
1c:b6:7a:85:0e:ca:0a:19:98:ba:e3:e1:f4:47:75:
33:60:69:37:00:79:b3:b3:40:72:85:1d:23:06:45:
8f:91:5d:4b:eb:b5:da:bc:bd:a4:83:10:34:19:30:
04:76:a3:e2:8d:af:02:50:ef:94:9a:45:ee:c6:14:
25:ee:4d:38:e1:f9:96:f9:21:89:22:3d:fb:54:08:
b6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.252.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:e1:1c:91:34:73:ad:25:ba:f3:07:15:3e:a4:f4:00:62:61:
bb:cf:ac:30:80:fa:e0:b9:56:ba:5e:01:4b:d2:0e:a9:36:11:
fd:f0:bc:a9:0f:03:7f:10:a2:21:27:e5:30:f6:67:6c:f8:45:
12:35:c0:02:42:98:9e:89:ee:37:d4:1e:6c:3d:a9:3f:73:43:
bb:0d:ac:6f:a6:8d:67:68:2f:1a:97:29:59:b8:3d:13:1f:ce:
41:69:5f:c1:1b:2e:e1:85:0d:e1:86:ec:d5:97:5c:a5:c0:84:
f2:ff:14:29:f5:77:7a:8a:a0:02:82:d2:be:0f:94:2c:9b:f5:
61:4a:bb:2b:73:02:06:f0:2e:0f:d2:07:7e:4a:47:89:d0:d6:
cd:40:10:ab:8f:7b:3e:58:aa:b7:df:05:85:77:7f:54:ea:91:
05:7e:c8:14:05:cc:a3:35:c1:8c:3f:99:c8:1a:92:bd:aa:e2:
d1:c1:3c:77:72:e4:aa:3e:82:fb:23:77:16:07:7a:77:93:5d:
35:72:b0:01:b6:1d:1c:c4:6f:39:6e:95:1c:50:22:80:00:bf:
60:2d:b4:f2:4a:a5:04:13:6a:ce:6d:bd:f8:51:98:ff:e6:b6:
99:6a:24:25:8a:89:16:c6:da:11:f3:c1:d4:8a:77:6b:fc:f0:
3f:18:bf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:01:22 2024 by rpki-client on console-fra.rpki-client.org