Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer (raw, json)
Hash identifier: vH8DNKUqWMNaYTowM3VhI7cRMhlcGeKOOQeM+mWUn4k=
Subject key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8016D6A465CC66670DACAEE61D40167
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 212.6.39.0/24
IP: 2a0d:dd40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:6d:6a:46:5c:c6:66:70:da:ca:ee:61:d4:01:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:73:ec:96:ce:e8:e4:63:d5:5f:ac:c1:10:
a3:33:12:51:cb:d8:d2:85:de:af:7b:ed:32:06:99:
85:94:01:b8:0a:f4:39:57:4a:cf:65:19:36:d3:eb:
88:3a:42:f1:c2:8f:a5:4c:28:19:1a:f5:8e:6c:0c:
23:eb:e0:f0:59:6d:38:95:f4:f1:1c:5c:4d:17:47:
a9:da:41:40:ef:ca:83:cd:d7:bc:27:ec:7a:7b:39:
87:dd:94:8b:83:b1:e1:31:89:7c:d7:cd:01:9d:e3:
30:78:68:5c:df:46:e2:30:e2:5f:0c:04:00:27:c2:
de:36:e1:0c:ed:e5:e2:6b:e3:0f:64:47:1d:40:75:
ad:b5:d4:4b:48:98:2d:f0:7b:d2:19:11:ca:33:cf:
b4:79:fd:a8:55:23:f3:3c:7e:c2:37:51:f0:b2:d0:
6e:80:ec:41:10:84:1f:72:c8:b8:9f:41:53:5e:19:
4c:42:ab:d1:d8:4b:ee:00:3e:fe:48:8f:57:40:64:
80:a1:30:3d:72:e1:17:f8:06:c5:7e:30:65:7b:41:
1f:12:b0:df:fc:9d:bc:df:f9:d8:12:2a:2b:67:ab:
b9:48:c8:04:e4:bb:c2:5a:ee:65:9e:e3:5a:5b:64:
3f:65:7d:28:76:5d:bb:1b:cc:19:23:c1:75:3f:6b:
70:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.39.0/24
IPv6:
2a0d:dd40::/29
Signature Algorithm: sha256WithRSAEncryption
7b:c9:8a:2d:bd:e3:64:a6:d2:92:ab:62:01:4f:70:5a:59:8e:
d5:88:39:a5:3e:3f:c7:53:a4:c9:03:c1:f6:a8:41:6d:5f:9e:
a0:27:c8:1a:e5:6f:03:98:b2:6f:57:a9:65:34:e9:c5:41:07:
f8:a1:8d:86:c0:7f:84:97:c7:ae:47:51:af:48:1c:27:8d:16:
ca:55:9f:77:3d:11:0f:8c:35:00:8d:5a:bc:b6:f2:5d:07:bb:
da:8a:ad:2f:d6:ac:51:c8:ff:bf:1f:4b:d3:f6:d8:e9:30:cd:
99:f4:cc:e9:85:6a:40:6d:28:c6:76:71:0d:19:f8:45:ad:f4:
81:62:81:06:22:4e:da:c9:47:b2:1a:81:ae:b5:3b:2b:b6:d4:
67:33:89:04:ae:9d:90:77:05:8a:35:38:46:5e:d9:35:5c:50:
15:05:b1:93:fa:00:0f:48:1b:56:1d:95:79:e7:dd:c0:f0:67:
4f:69:39:57:6b:ed:71:8f:0a:0b:b0:79:c5:7a:22:aa:32:98:
15:0b:c3:72:50:7c:ca:d6:80:4c:0b:93:83:e3:23:91:0b:2a:
ab:47:5d:a4:68:8a:a7:4a:21:53:dc:8a:f1:13:d8:8e:47:8b:
92:d9:6a:88:e2:e3:e5:2a:dc:d6:e3:a1:83:61:57:02:b0:c0:
dd:f3:74:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:02:07 2024 by rpki-client on console-fra.rpki-client.org