Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
File: sVyi9obU5ISnfDTBc0dr9p0je30.cer (raw, json)
Hash identifier: 9DhWvCvCxVhB3+QIeWKh8wjhpqAZ7meC89oEnEpPWAo=
Subject key identifier: B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8011384DD5475643BCE47B5B2747239
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 94.124.120.0/21
IP: 2a02:9e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:13:84:dd:54:75:64:3b:ce:47:b5:b2:74:72:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:a1:5d:61:8c:5e:8c:25:14:78:73:f7:c0:
1f:14:09:cd:01:7b:4f:ae:53:07:4c:f1:a8:f9:59:
31:c6:8e:7c:e1:cb:46:eb:0d:b0:21:6c:db:ee:27:
a5:87:45:07:f9:e8:52:87:bf:e7:af:33:ce:91:22:
b5:9d:fd:54:99:56:37:4f:62:6c:42:c2:85:66:9e:
46:01:dc:93:5c:7d:ae:12:8b:44:30:0f:46:10:3c:
24:86:b0:4a:34:19:94:7e:83:cd:81:6a:65:ad:f4:
66:a2:c4:2c:ed:23:e0:a6:69:a2:50:ee:1e:e3:44:
4c:dc:03:3f:65:ab:cc:3a:9c:03:5e:57:03:d1:63:
fe:7d:3b:a0:75:80:de:1e:7d:d9:18:0f:3d:1b:b8:
7b:fa:7d:02:ef:68:d2:4f:51:06:8b:a1:db:39:5e:
58:13:ba:04:99:e7:ba:d3:a2:c5:34:39:a3:5e:e6:
f1:2c:ba:2b:0f:bc:01:84:d2:14:98:30:65:d8:83:
aa:90:21:20:b8:98:bc:08:10:a4:87:75:3b:b6:5c:
08:34:43:71:a8:0b:de:f9:7f:d9:0e:eb:ec:74:4b:
13:9e:b6:61:82:01:0a:e0:69:1f:58:85:8f:2a:a1:
3c:a3:00:aa:4a:ef:78:a8:3d:b5:cd:2f:7a:ce:52:
74:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.120.0/21
IPv6:
2a02:9e0::/32
Signature Algorithm: sha256WithRSAEncryption
2b:af:cc:40:ef:8d:9f:7d:33:6f:71:aa:dd:c0:3b:a9:12:07:
60:68:d5:37:9f:c1:ee:f4:79:7d:17:16:bb:68:38:40:54:f8:
8c:83:6f:49:da:f1:d1:37:a3:5a:19:e8:23:62:1b:8f:59:49:
96:77:24:a3:df:8c:b6:6b:32:69:41:ec:9e:79:d0:9c:1e:df:
51:ac:f6:5b:38:58:fa:ba:02:6e:c5:21:36:9d:08:81:c0:bc:
bb:3b:40:32:09:09:ca:35:97:c7:b7:be:d5:bd:4b:17:fc:a8:
5c:a5:bd:25:ef:76:a1:61:86:2c:ac:58:a0:93:5d:e2:27:c9:
16:0b:dc:64:71:b9:a2:dc:0c:29:3c:d3:a2:d9:b9:59:8e:c8:
8a:25:29:bf:16:eb:3f:ef:21:d5:89:72:ef:d3:68:fe:12:1f:
8f:3d:30:bb:ce:2e:05:6e:d8:15:28:37:a8:fa:66:36:9c:53:
c5:32:81:de:97:50:94:f1:5c:8c:c1:3d:28:b2:0e:06:8a:1f:
15:4f:a7:45:72:28:90:fa:d9:f4:b5:b6:18:be:ff:8d:e6:4a:
06:47:72:9b:4a:98:3e:1c:93:70:1c:16:63:c5:fa:a3:2e:25:
d4:d3:83:f4:38:34:a5:75:51:4d:48:76:5f:59:41:9c:23:70:
43:3f:9f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:32:09 2024 by rpki-client on console-ams.rpki-client.org