Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
File: shna0BUe3wUqLxyX34hKWoeotfU.cer (raw, json)
Hash identifier: L7OLU20rEWYPNBhQa+35Di9+OGsVeT8V6yaHKdIxb6o=
Subject key identifier: B2:19:DA:D0:15:1E:DF:05:2A:2F:1C:97:DF:88:4A:5A:87:A8:B5:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC87138A79864A034FEBF9439BD70038C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.222.212.0/22
IP: 195.242.128.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:38:a7:98:64:a0:34:fe:bf:94:39:bd:70:03:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b219dad0151edf052a2f1c97df884a5a87a8b5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a1:6f:1a:68:3d:93:e1:e6:7c:80:65:cc:0d:
32:06:66:7b:ec:6c:48:15:61:c2:05:54:bb:13:48:
8d:4b:84:60:4a:10:09:81:8a:da:8b:3b:8c:94:80:
88:26:af:01:0c:18:90:1d:f1:53:c9:a2:8d:f5:0a:
42:9c:27:f5:15:a5:33:d2:d8:51:7d:0f:b0:94:cb:
de:da:41:a5:0e:98:1b:c4:13:93:9b:94:29:6e:77:
8d:92:46:05:c9:45:82:cd:4d:c0:24:97:c7:bf:2f:
ac:3d:5b:a1:3c:36:a0:95:d7:50:b2:be:a8:90:12:
82:71:1d:07:92:04:73:31:d3:12:63:21:ca:29:e9:
f2:d1:fe:6c:65:95:79:85:5c:a2:b7:1d:51:4a:12:
9e:5e:cd:5c:d2:78:e3:5a:81:5e:8e:25:91:84:6b:
cc:cd:82:6f:52:72:12:0f:ff:6e:10:b9:56:82:e0:
e7:b9:da:21:ec:f4:21:22:6e:08:b4:eb:52:a9:5b:
bc:77:6c:f5:5f:13:a1:5e:27:3f:99:cb:bb:28:f0:
0c:44:dc:f4:5a:e7:77:5c:4e:8c:0f:1b:78:88:26:
61:e9:45:8d:e6:95:bc:44:53:a0:21:67:da:8e:23:
2e:04:49:c5:49:6f:4d:55:c9:95:8c:a8:30:b2:da:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:19:DA:D0:15:1E:DF:05:2A:2F:1C:97:DF:88:4A:5A:87:A8:B5:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.212.0/22
195.242.128.0/23
Signature Algorithm: sha256WithRSAEncryption
71:67:19:2a:c4:78:38:e4:fd:99:7f:6a:f0:e3:27:d6:90:0a:
8c:c1:3d:34:ab:6d:e6:9a:28:ea:6d:6d:8a:f8:c0:cb:fe:6e:
a7:ca:4a:b7:85:ac:ee:30:31:3b:af:9d:ab:df:99:a4:22:31:
9a:2a:ef:c3:b8:20:a9:5e:17:ac:ed:36:f7:64:c2:7b:21:45:
93:15:47:25:2f:cc:a4:2b:d4:1a:dd:fe:b9:b5:78:3e:fc:cf:
8f:07:5d:7f:79:46:5a:e9:da:14:a2:4e:e4:12:b2:c1:05:f2:
99:31:7a:9c:e3:66:d4:6e:23:72:e0:ba:9a:ec:0b:8f:8e:59:
a5:fa:e6:db:d5:0b:19:75:f4:09:6c:a7:e6:5b:d9:09:ce:c8:
8d:08:85:30:10:69:65:06:6c:d0:88:e2:fc:c9:01:de:79:60:
f0:01:8f:08:ea:cb:19:8a:89:9b:da:19:a8:5b:c3:2b:88:6f:
10:56:41:3a:88:54:bc:e4:92:c1:3a:86:76:ce:f0:7c:2b:19:
cc:d1:8c:92:1b:16:1f:eb:2c:b9:b2:f0:ed:a2:83:98:b7:be:
cf:80:35:f2:29:7d:04:58:a1:c5:19:4b:1f:23:0f:1c:26:a1:
2c:6e:88:65:e9:32:e7:55:db:5e:ab:13:79:f5:4b:90:8b:52:
87:14:e4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:16:48 2024 by rpki-client on console-ams.rpki-client.org