Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
File: sK0iZDwtl71x-LY0-40dT58B9Kc.cer (raw, json)
Hash identifier: l6oz5jDoztiu36D6pjmMkQ/9c5C/iRusbjdTzdiMsTE=
Subject key identifier: B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB5E707270F26ADB70BF73BA728914
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.203.118.0/23
IP: 195.88.152.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:5e:70:72:70:f2:6a:db:70:bf:73:ba:72:89:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:25:b9:c9:56:34:1e:ac:11:52:f1:fc:75:
e4:34:f8:28:10:82:f9:2d:ba:82:a5:71:e6:e6:9a:
8b:79:a6:8c:48:39:48:b6:2a:1a:45:d6:cf:28:a0:
50:52:4c:54:dc:9c:8b:c3:4d:b6:70:e6:a8:b4:a5:
27:ba:34:e6:6f:ce:63:31:29:33:d8:bf:73:12:d1:
2a:fc:72:1d:58:dd:d4:19:5c:98:fe:33:dd:d1:40:
64:3d:eb:8d:95:c4:26:e6:22:88:a1:6b:da:59:b1:
45:08:a0:3e:be:6f:00:fc:6a:82:dd:5e:ce:9e:6c:
7e:9b:cc:70:55:15:c0:94:a9:5e:7a:5c:c5:51:19:
4b:7e:77:d0:79:46:cd:1b:c9:d5:53:55:c8:e4:f2:
75:dc:31:24:ee:a5:a5:d8:00:0b:3f:18:83:1c:f9:
c4:e9:ec:16:2f:ae:df:dd:d1:a8:ee:f8:f2:65:2a:
98:7d:6e:93:6a:62:7a:24:d9:70:53:33:f1:14:3b:
a2:f9:9c:6d:34:9d:88:af:f6:09:68:93:ac:b8:0f:
fe:e9:19:db:85:81:5a:7b:dc:50:0d:22:aa:93:ce:
f4:c4:53:49:ce:b1:da:9e:7c:db:b5:30:4b:1d:31:
c3:db:4c:86:68:af:cf:aa:b6:28:46:e8:09:b1:d7:
b2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.118.0/23
195.88.152.0/23
Signature Algorithm: sha256WithRSAEncryption
33:11:1b:2d:34:09:91:16:03:16:87:c5:de:5f:3d:b1:26:97:
50:c0:6b:8f:19:85:eb:f2:ed:7f:f9:4b:ee:0f:82:59:8a:1b:
8e:41:ba:b7:08:0a:d0:2e:ac:c1:c0:a6:32:90:5f:6b:74:9e:
68:17:f8:14:03:7f:a1:1b:54:69:77:4b:2d:f6:ae:66:9d:03:
ce:9f:65:92:26:fd:e5:3b:03:b7:95:48:de:f4:ae:d5:0e:a8:
bf:e4:02:82:11:47:a1:17:b5:5a:ab:dc:71:3a:46:0a:00:b9:
1e:0e:c3:b5:ec:f4:dc:c8:c8:d5:0a:6a:ee:0e:50:e0:43:15:
9a:61:6b:51:07:85:46:b6:4b:3a:d9:f5:33:2b:b3:89:bb:a0:
34:18:81:e5:42:0c:37:ad:70:a6:98:03:cf:aa:cd:a9:33:f6:
f9:88:61:50:10:2a:57:43:6f:a4:e5:76:79:d8:70:c7:6e:08:
e6:e5:5e:ab:bb:07:ab:c8:63:b8:06:91:9f:c8:37:f3:d1:53:
05:a1:8a:de:a4:5c:97:f6:b6:69:86:a7:40:10:a2:b8:73:99:
a4:ea:f1:1b:95:34:18:d5:d1:a0:96:01:09:31:56:28:a3:52:
e4:9f:b0:df:73:04:2e:5c:be:08:88:81:15:56:33:69:06:61:
2d:a6:03:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:04:54 2024 by rpki-client on console-ams.rpki-client.org