Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer
File: sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer (raw, json)
Hash identifier: ImICn4u0K/v4GbWEgqg8Pf0rCYntL2dKF0uDWEeWYjI=
Subject key identifier: B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E46EE2DAB4F09D93A3026C4FF10DD02EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 16 Mar 2024 11:03:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 37.16.89.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:46:ee:2d:ab:4f:09:d9:3a:30:26:c4:ff:10:dd:02:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 16 11:03:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b056811cb944a23c757f57affd483c6fcfb80119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:74:07:c5:6d:9c:5f:27:4d:f9:eb:d5:fb:
52:84:6b:11:5f:a9:62:1c:be:34:52:09:6b:7c:11:
7f:17:9a:5d:b7:0f:52:83:92:14:c7:b8:5d:44:46:
88:eb:aa:73:21:66:84:40:2b:b4:08:2e:5f:b4:2b:
1f:2c:83:bc:8c:b2:d7:e9:70:25:af:b6:d1:fa:73:
5a:20:82:14:de:40:e4:c1:4a:3c:7b:9d:a6:3b:ba:
6f:1b:77:78:98:48:99:76:99:a0:0f:fc:b3:2d:8d:
70:02:17:c3:74:c4:c5:99:33:dc:8b:e3:ea:ab:05:
84:9f:46:cd:23:95:73:b9:f7:e0:ec:66:9b:0d:a1:
72:bf:25:6b:34:75:b5:6c:9a:ed:5b:67:e3:24:43:
a7:62:5e:e9:9f:12:df:6f:20:31:f9:41:88:4b:12:
ec:ae:45:ee:af:27:ec:c0:2a:d9:0b:1e:03:95:48:
92:92:9f:0f:a8:21:a2:86:b1:0a:dc:fc:75:26:ed:
b3:e6:3b:9f:e0:70:45:89:d3:a1:0d:55:1f:e7:4d:
21:30:34:b2:82:9b:7c:9b:0d:4b:e1:ad:aa:a6:c9:
f2:f4:28:3c:11:0e:34:c6:8c:28:77:f2:2a:aa:62:
3c:88:ea:ca:19:d8:e2:37:ca:4f:ea:a0:44:07:fc:
30:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.89.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:d4:cf:a4:cb:41:b3:b0:3b:d8:69:47:bb:94:ac:fd:42:c3:
f3:0d:61:75:12:b1:09:e4:71:8f:e6:28:b2:bc:35:f1:ed:d8:
c0:13:fb:6e:40:21:22:84:89:62:7c:16:b8:7c:c1:4c:18:cb:
41:7b:ef:5c:10:3b:5b:58:00:c3:f5:62:98:ea:76:68:0f:66:
82:3d:cb:be:1f:9a:cb:e4:37:7f:4d:3f:5b:be:27:ee:6e:7f:
cb:a7:be:1f:a4:14:1d:b9:fe:e9:7f:08:16:db:7f:34:c0:04:
17:11:00:78:ca:e5:d3:19:9b:26:b6:10:58:47:af:77:14:f5:
11:c5:ac:aa:75:eb:e1:a8:a3:3c:c6:0b:e8:57:41:15:db:91:
31:dd:5b:e7:a8:9e:71:23:af:62:fd:8e:2b:cb:17:83:15:26:
3a:28:fb:b6:8c:e5:6d:95:8b:43:3b:b4:0d:cc:14:ba:de:ed:
90:8c:5b:33:eb:03:6c:ca:f2:fa:28:d6:2e:1a:c5:85:15:66:
70:2a:f4:95:22:f6:0f:64:b8:3a:fc:24:8c:a8:a1:a6:da:59:
db:08:0d:e8:fe:97:64:66:af:f2:6e:61:05:10:6b:c9:d3:7b:
40:0d:9a:44:ad:d4:bc:d7:0e:bf:d4:d2:d5:35:96:0e:d2:eb:
0d:ad:f7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:39:05 2024 by rpki-client on console-ams.rpki-client.org