Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/suWMwsReWnP0hJQxVVglny_FBtc.cer
File: suWMwsReWnP0hJQxVVglny_FBtc.cer (raw, json)
Hash identifier: AsckQPA2kWqlXd8jNGNj8fnUr2dCF9jGIFFocNTmhYE=
Subject key identifier: B2:E5:8C:C2:C4:5E:5A:73:F4:84:94:31:55:58:25:9F:2F:C5:06:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56ECE47E8DF4D7BD4631BBE5F2AAF3F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/3921b7-444c-4fef-8b77-c3c471afeed6/1/suWMwsReWnP0hJQxVVglny_FBtc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/3921b7-444c-4fef-8b77-c3c471afeed6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.33.98.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ce:47:e8:df:4d:7b:d4:63:1b:be:5f:2a:af:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2e58cc2c45e5a73f48494315558259f2fc506d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:09:f2:cf:8c:ea:78:1a:0a:46:5d:2a:7c:a3:
0a:a3:c2:c7:d7:ac:1e:f4:a1:7b:a3:c6:ab:5f:07:
8e:07:26:e2:62:70:db:b9:2a:4b:20:85:3f:3e:b7:
5b:89:aa:f7:a3:82:9f:b7:17:6e:90:6b:e5:4e:5f:
1d:71:65:42:03:91:6e:f4:55:16:7b:48:48:6f:72:
dd:7a:35:7d:a1:4e:ab:0c:e9:d3:24:05:34:c1:31:
8d:f2:1e:0d:05:ac:1e:07:b6:db:d2:b2:28:a0:af:
09:54:43:35:c1:e7:3d:ec:75:a0:a8:cb:92:e9:23:
2e:ab:e6:3a:2b:b9:82:bf:e5:72:b9:3f:f5:8b:29:
fb:80:cf:32:6d:26:be:29:94:c1:87:88:c0:3a:d8:
70:52:4e:34:70:15:9e:01:0f:54:7b:5b:05:de:0f:
4a:b2:db:16:c6:8f:9b:0b:6e:5f:c6:05:5f:00:79:
26:bf:06:04:96:3b:88:97:51:07:50:fb:00:5d:4f:
4d:62:9f:c7:e3:46:38:7a:e7:7d:73:77:4e:c3:11:
7d:53:87:5e:61:b9:eb:7d:57:cc:33:07:97:ae:79:
77:db:18:29:ad:92:f1:39:20:ee:0f:3d:f7:67:f8:
e5:f2:44:6f:bc:81:c8:f6:90:17:c3:8d:a3:45:cc:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E5:8C:C2:C4:5E:5A:73:F4:84:94:31:55:58:25:9F:2F:C5:06:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3921b7-444c-4fef-8b77-c3c471afeed6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3921b7-444c-4fef-8b77-c3c471afeed6/1/suWMwsReWnP0hJQxVVglny_FBtc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.98.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:8d:79:d7:25:f9:9a:61:0d:c1:75:ed:6d:4e:a3:ab:a5:7f:
0e:4f:33:05:a0:26:15:cc:cc:30:ef:d3:6d:b8:25:91:24:26:
a4:2c:75:69:61:37:95:5c:8e:5c:c5:00:37:b1:98:59:ce:b3:
4e:93:14:54:9d:fa:fc:5a:de:87:06:02:e0:65:d8:ff:33:b8:
92:fc:74:5c:82:f3:6f:13:3a:0b:c9:c4:70:aa:67:74:ed:69:
fa:ed:b0:75:67:25:fd:75:4a:f7:b9:60:dc:56:bf:af:77:28:
64:dd:4a:da:6f:35:b8:0e:ca:f5:0a:2e:f3:f3:bf:55:2a:96:
03:9f:7a:f3:f2:69:32:8a:eb:b2:a0:88:28:7f:a8:44:32:de:
ce:b9:fb:05:9a:18:9f:b7:2c:6e:ba:61:a5:86:4a:00:87:a4:
4b:86:a4:75:61:f1:05:70:9d:21:1e:22:4d:b4:21:77:55:da:
48:cf:f0:7f:05:14:d4:b5:80:98:51:87:5f:c7:8c:59:ac:84:
e0:4a:48:7c:07:b8:a1:8d:b8:4d:6b:40:06:9d:07:ed:c7:a9:
7a:2d:16:84:36:c4:c3:5e:7b:7b:0c:2a:5c:40:43:fd:fb:80:
f7:c0:45:c4:7d:60:2e:c7:65:4f:ed:cb:28:9e:ae:49:a3:38:
04:c5:90:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:39:31 2024 by rpki-client on console-ams.rpki-client.org