Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
File: t6x4DrIELIxXABtl7xVub1kxI5s.cer (raw, json)
Hash identifier: +7P02d+Otp3/mno9d/h9DMVHC5H2ytA7MUpAcC+9UpM=
Subject key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC727521987778B4BE31966E8BC3E136A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.167.164.0/22
IP: 2a0b:7e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:52:19:87:77:8b:4b:e3:19:66:e8:bc:3e:13:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:13:e3:49:39:dc:5a:36:a3:74:a8:b1:4e:
b0:7b:03:4d:59:5d:20:94:a7:1a:bc:7b:ab:b4:8e:
3a:2b:59:ea:52:ec:85:1a:34:31:6e:d5:dc:0f:ca:
ab:72:ed:6a:fc:19:ca:b2:c7:c7:78:2a:0b:7a:20:
b8:ea:9d:5c:b2:3b:88:f2:d4:bc:f4:bc:72:ef:ac:
d3:f0:83:ab:e7:a7:56:7b:ee:0d:c8:74:e9:d1:64:
6f:78:4b:bb:86:7f:02:ae:f9:12:8f:14:0c:0c:ad:
8c:4c:83:6e:85:60:f9:c9:b4:8c:67:34:03:35:0c:
87:48:c2:a8:f9:74:48:45:4c:7b:4a:da:a8:90:ec:
95:db:e6:3b:8c:eb:a6:93:6c:3a:3f:0c:f1:ff:03:
e4:b4:7f:ae:61:9d:d6:b6:86:77:e2:00:cb:fc:8c:
02:fa:31:b3:31:ad:16:19:f1:27:d5:e1:9b:96:28:
c1:0b:3b:09:f7:08:74:c5:e7:2d:1e:46:00:7f:c9:
4f:8f:56:b2:5e:0a:a7:e6:00:a3:a6:1f:07:a9:b4:
e5:65:fb:62:b4:5b:5d:60:14:44:57:be:6d:e4:9f:
76:59:1b:ae:6c:03:5f:44:98:35:9f:61:4d:e4:74:
61:36:75:93:70:98:e9:ab:46:7f:f5:d2:4d:0c:59:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.164.0/22
IPv6:
2a0b:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
0c:39:69:19:36:f4:a2:4e:1a:c2:24:80:b4:bd:dd:7f:60:87:
c1:3a:94:1d:27:48:f0:c9:f9:9c:1d:ec:f9:e1:84:01:48:05:
64:5f:38:23:28:63:71:27:34:4a:3d:9d:4c:62:f0:31:97:a3:
89:d1:7d:04:94:38:95:9c:99:ec:db:c4:b9:e7:4b:93:24:4c:
a9:e7:78:e4:19:e8:f9:f9:c9:7c:82:00:24:38:6e:90:40:f5:
6d:e0:22:c6:42:b7:f3:8a:d2:6b:f5:37:82:e5:6e:5c:a6:10:
cc:26:42:16:3f:28:d0:ae:0c:b7:35:6f:5e:80:2e:af:8a:8a:
1e:24:0b:33:b0:6a:b9:d7:ed:f4:ec:fb:9f:85:8f:93:da:cd:
04:64:33:b3:da:ba:8a:2a:c4:3e:63:77:4b:a1:2d:9a:76:b4:
ab:17:97:92:6f:38:41:c3:98:06:9b:92:a7:a6:07:db:8e:c1:
82:1e:2d:d4:3f:89:46:bd:cf:d0:8b:e7:2e:2c:12:40:46:5d:
c9:e3:6b:84:24:6c:45:98:c6:6a:7c:79:0e:2c:de:4e:17:a7:
42:03:6d:0a:b6:0f:c9:78:87:79:de:8b:2d:6d:cf:d6:e3:f8:
68:7f:c8:be:25:40:17:b1:a4:32:14:9d:3a:aa:8b:76:b4:e7:
63:8d:32:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:32:33 2024 by rpki-client on console-ams.rpki-client.org