Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/smS9DDwCpMvCz3SpNn481TB5hyY.cer
File: smS9DDwCpMvCz3SpNn481TB5hyY.cer (raw, json)
Hash identifier: tQoS0xMXFYeQpyhovZ/l/JmE86hXboMyEWEkpMsc9oo=
Subject key identifier: B2:64:BD:0C:3C:02:A4:CB:C2:CF:74:A9:36:7E:3C:D5:30:79:87:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94DDAFDC2A6143442058B30E5A7CF3E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/ecdb70-5e6d-4d4a-bc27-9e90f02c9313/1/smS9DDwCpMvCz3SpNn481TB5hyY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/ecdb70-5e6d-4d4a-bc27-9e90f02c9313/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.147.124.0/22
IP: 2a07:ca00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:da:fd:c2:a6:14:34:42:05:8b:30:e5:a7:cf:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b264bd0c3c02a4cbc2cf74a9367e3cd530798726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:66:a2:82:33:b3:63:29:bb:bf:c4:43:74:
20:cb:1d:12:11:da:65:44:fb:b3:17:e1:e8:69:d1:
52:f3:f1:ab:bb:2f:8d:18:60:c4:9f:62:23:9d:f4:
8d:22:da:f7:16:53:e4:c1:2b:15:99:3c:33:0c:8d:
9e:74:64:8c:1f:53:ae:ac:37:c4:6d:3e:de:69:18:
61:69:3b:53:2f:47:e2:d1:df:15:c7:52:e2:f1:f2:
38:db:ea:27:21:63:56:64:e9:95:ba:e1:15:61:2e:
b1:3b:73:7b:ba:da:12:72:6e:da:ec:f7:b0:80:d0:
8a:f5:f3:a0:cb:10:d3:56:21:7a:6f:05:39:88:1b:
23:c5:1a:17:7f:45:d3:b4:47:c4:38:f8:42:26:3f:
bd:f5:24:80:7d:10:d8:56:f3:72:37:ff:62:96:74:
1e:c3:26:a0:45:a2:be:ed:47:af:5a:ab:b4:a4:2b:
26:fa:d3:9d:45:65:cd:60:c5:d1:01:e1:4c:42:98:
32:f3:f7:3d:44:e8:74:2e:34:86:c8:6d:90:76:2c:
24:4c:36:a6:c5:a5:b3:42:37:83:23:9e:29:3a:88:
23:88:cf:18:82:b1:f6:c2:6f:b0:19:26:2d:99:28:
8e:9e:db:6f:4c:2e:d8:8b:69:61:f1:f0:48:47:33:
21:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:64:BD:0C:3C:02:A4:CB:C2:CF:74:A9:36:7E:3C:D5:30:79:87:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ecdb70-5e6d-4d4a-bc27-9e90f02c9313/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ecdb70-5e6d-4d4a-bc27-9e90f02c9313/1/smS9DDwCpMvCz3SpNn481TB5hyY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.124.0/22
IPv6:
2a07:ca00::/29
Signature Algorithm: sha256WithRSAEncryption
0c:0d:a0:cf:fb:92:62:69:a9:26:d7:92:9e:b9:15:40:50:6f:
e5:cc:0a:01:ba:9d:94:13:79:2c:e3:cd:d0:21:2b:19:74:3c:
ab:68:76:60:99:97:7e:14:e8:81:93:a1:7f:a1:4d:e0:7a:c8:
69:2c:44:42:4f:f0:c5:4d:37:ce:53:23:2c:69:d6:d0:d7:2d:
9e:80:43:f7:32:4e:b5:57:4f:b8:09:16:67:e1:c7:fe:87:50:
6d:d4:88:49:6a:cb:21:b5:ca:f3:4a:c5:63:e4:49:97:23:07:
28:f5:77:5f:95:da:45:92:af:59:50:ef:1e:73:4a:86:0b:a1:
dd:aa:42:8e:6c:bb:78:45:c6:ec:93:32:fe:53:80:54:44:cf:
48:7b:fd:9b:b0:50:16:e7:bd:c6:94:4b:ba:e3:f6:fd:84:ef:
f8:a2:73:c2:d5:cb:fa:a9:58:9e:68:34:70:e1:b8:6a:49:fc:
70:81:76:46:88:1c:88:8c:4a:b7:78:da:7f:33:7c:39:ab:8b:
2c:bc:ad:47:cb:1d:51:b6:18:bc:1b:3d:29:0f:ac:02:be:ac:
e9:7b:b2:8a:60:ad:95:3d:5d:2c:94:98:1e:4d:06:04:d1:1c:
1d:ad:ec:fb:34:e6:d6:0b:df:90:e1:66:41:59:ca:e3:4b:46:
5f:40:ab:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:32:19 2024 by rpki-client on console-ams.rpki-client.org