Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
File: tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer (raw, json)
Hash identifier: xLEUrubCpcSMKE7qUsTd0Lb3Rgr2ZDDeolWQCecmOvo=
Subject key identifier: B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF3778586EDAD3EAF744AB06524581
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.14.28.0/22
IP: 91.200.8.0/22
IP: 185.175.244.0/22
IP: 195.22.140.0/23
IP: 2a0e:880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:37:78:58:6e:da:d3:ea:f7:44:ab:06:52:45:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5745bb8ef0088cb519a4095d651719ef51ee354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:88:8b:dd:a2:cb:a3:58:4d:ea:ce:79:aa:9e:
76:d6:93:bb:26:32:2a:b4:1d:08:f3:70:52:c5:4b:
e4:42:97:3e:1f:03:3d:e2:ff:b7:3b:3c:3a:0e:60:
82:9f:b2:83:ce:98:19:ef:49:9d:df:8c:cc:b9:48:
ad:53:02:5d:a4:18:e7:b1:a0:37:81:da:cf:9c:46:
a8:58:7f:91:c2:55:8d:fe:91:df:af:d2:f8:7d:60:
e2:48:0d:5c:62:c6:04:58:84:ff:f3:c9:c9:73:70:
af:b0:b3:cd:ea:fd:39:e9:f1:28:5b:8b:04:0a:f3:
df:a3:10:ae:99:21:05:03:c1:54:15:d1:5c:44:1e:
12:ba:b0:17:13:a9:9d:5a:e9:ec:14:6b:68:f7:9a:
18:c0:8a:4a:d6:0f:e9:a9:2d:26:51:e4:4c:cc:5c:
b5:e2:7d:62:c5:10:c9:4d:c7:0f:a1:6d:54:e3:2d:
d0:94:ac:39:a6:72:32:41:cb:d5:3c:0b:85:9a:19:
6e:42:d3:e6:32:16:01:fc:0e:de:1b:b1:61:4e:80:
76:7c:2d:d5:de:de:52:04:32:76:46:07:2b:80:ac:
27:1b:e5:8b:c8:b1:c8:cb:0a:a2:6e:fa:d4:bb:62:
c5:3c:ce:cd:95:01:c3:48:21:d8:38:28:e5:1a:0a:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.28.0/22
91.200.8.0/22
185.175.244.0/22
195.22.140.0/23
IPv6:
2a0e:880::/29
Signature Algorithm: sha256WithRSAEncryption
34:09:e7:e8:eb:ba:8d:82:2f:7d:c6:e0:56:5e:46:f9:0e:3a:
14:59:da:aa:e9:3b:86:e7:be:75:65:de:83:7a:15:f1:e7:13:
3f:ef:3f:c8:a7:78:a0:83:27:1e:34:49:3e:39:d9:a8:3c:2f:
4e:83:0c:44:58:18:9e:23:30:be:fc:b7:c4:c8:84:6d:3e:2b:
a7:5d:f3:6a:ab:40:7a:25:d5:db:e7:77:9e:54:68:eb:48:d7:
7a:f7:0c:82:95:68:a1:65:f5:e7:ad:4c:7a:60:35:43:d8:22:
25:36:b8:ba:e2:21:3a:a2:74:2f:c4:69:7a:5c:57:9a:b6:a3:
80:21:4c:d8:50:e0:d1:a7:48:3b:ab:bc:3c:b6:42:66:70:2f:
b0:c2:20:0c:10:e3:76:51:79:df:81:55:54:d7:35:f4:76:7e:
80:0b:a5:02:48:1f:22:89:2c:ec:2e:e2:ac:b2:8f:b6:57:79:
5b:54:76:40:6e:79:00:89:65:a2:dd:84:30:9e:ec:14:33:90:
29:3d:4b:74:d9:8a:56:e1:05:e9:cf:56:08:78:35:fc:80:21:
fe:ee:73:bb:b9:bd:b4:37:a6:df:6b:81:a7:8f:e7:95:98:c9:
19:1c:04:60:72:7c:3c:ab:c0:bc:13:ed:9e:c1:0b:fe:d7:a3:
42:d9:6f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:05:42 2024 by rpki-client on console-ams.rpki-client.org