Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
File: rwlQP8rAF2lRWhny3CZX2S_TUN8.cer (raw, json)
Hash identifier: uge3ZHvX58quY0CLGigDAE97VWgHV3h+vzAZcCJxLbk=
Subject key identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC5C495DCB748225D65FAC1B09E81C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 141.10.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:5c:49:5d:cb:74:82:25:d6:5f:ac:1b:09:e8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af09503fcac01769515a19f2dc2657d92fd350df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b4:53:15:d9:b7:96:11:4e:ee:23:fe:15:b2:
c9:2c:70:b1:52:2a:00:a6:74:e6:e6:af:8c:58:77:
06:cf:99:56:5e:de:5d:ed:8c:10:2d:0c:90:30:ab:
9e:f6:e8:9f:ad:ae:4c:66:c9:b4:50:aa:0a:2a:c9:
cd:ae:50:f5:18:e0:1d:e4:f7:46:70:4f:0e:c4:a3:
51:0d:87:c8:a3:a9:34:8b:0b:b2:7b:68:5d:b1:e3:
c7:e7:d0:c1:6f:10:b0:27:5a:b9:13:b5:2f:de:12:
62:d9:15:30:18:68:64:7e:2b:b2:9b:07:74:c4:85:
75:58:86:4f:ee:ad:cc:60:af:a4:ea:f5:a5:86:76:
87:49:7c:71:e1:fd:8c:a6:a3:df:c9:7e:ef:e7:08:
80:7e:23:85:3b:15:94:bb:b1:1d:82:de:65:75:ea:
f8:08:11:f7:52:c9:88:3c:d5:3c:e8:6c:f2:64:c0:
7d:cf:c2:ed:46:20:47:ed:84:1d:64:41:ce:7e:78:
93:33:0a:cc:36:a1:33:6f:dd:96:de:18:3c:5f:fd:
e0:61:23:a6:9b:b7:63:ce:c4:dc:6d:52:fa:91:55:
7a:eb:35:78:56:2d:a2:c9:48:fb:fd:4e:e3:18:5d:
2d:77:81:37:31:25:d1:dc:fd:fd:04:e7:21:f2:ed:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.10.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:a4:8b:76:85:19:8d:5b:76:58:a9:96:e4:54:64:60:8d:5f:
71:b4:e5:ad:8c:e4:73:b9:c0:ae:70:83:bd:be:18:4c:41:f6:
e5:f8:99:38:dd:2a:2d:9e:f7:56:10:65:b5:6f:9d:98:c9:18:
9d:32:e4:5d:dd:6f:55:36:43:65:c8:fb:c4:29:4e:0b:0c:d4:
15:f6:5d:df:2b:f4:b3:40:15:10:d8:15:df:f2:da:58:1f:5c:
fc:72:ac:fe:e0:0d:61:e0:13:2c:43:86:fc:5c:4e:fa:83:89:
6e:09:67:d4:72:a6:5b:ad:ed:94:0a:a9:1a:7f:b7:39:96:c8:
11:45:b4:b6:fe:ee:28:f2:ed:fd:3b:ca:88:7a:c1:f7:98:60:
5a:e8:fe:8e:66:e2:94:e1:77:eb:4d:d6:77:e1:01:46:49:cd:
f6:f2:02:80:32:bb:46:83:e6:42:7e:ee:a6:99:3f:fe:aa:d1:
ea:28:5c:e2:87:ed:80:07:7a:1c:53:bc:35:6b:bf:0a:ba:89:
07:1c:bf:c1:e1:4d:e9:bc:8e:81:05:2e:84:5e:d1:09:e9:09:
c2:5a:0b:25:26:d2:14:03:bd:75:92:18:87:bb:93:e2:70:79:
91:6d:de:0c:b9:cf:fa:f8:30:01:e7:5b:06:4a:82:39:a7:bf:
f7:83:21:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:31:48 2024 by rpki-client on console-ams.rpki-client.org