Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
File: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer (raw, json)
Hash identifier: eYVRphvz6Z2SwxHo4PrLtHQ99L1EVNnmlcNgjp04lQU=
Subject key identifier: C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424530B692810377B0922FAFAAAE49C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.2.227.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:53:0b:69:28:10:37:7b:09:22:fa:fa:aa:e4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:9c:21:10:a0:e6:f3:74:43:25:21:c0:73:
b6:9b:94:92:bf:44:fb:bb:68:d2:22:2d:5b:16:75:
16:a1:4b:aa:03:e9:6b:4a:e3:28:59:ff:cb:d9:ee:
e2:85:d7:e8:35:a1:d9:da:a4:da:fb:20:5d:3e:85:
c6:76:71:15:cc:c7:f4:9d:9c:f8:db:b3:61:a2:38:
d7:e1:f8:42:61:2e:4c:4f:eb:70:85:b9:00:fe:47:
a6:60:a0:d2:f0:dd:86:b4:0e:9f:6e:74:f7:bb:3e:
fe:36:ee:dd:2e:46:c1:05:57:31:62:4f:11:3c:1c:
1b:d0:83:b2:e9:7f:3d:75:31:b3:6a:b3:c0:8f:97:
37:8d:64:41:81:75:7b:cc:44:e4:69:c5:00:f2:23:
90:01:57:ed:39:d4:5c:4d:f6:3c:e4:fa:88:34:c7:
fc:9b:9e:33:5a:32:4b:1d:9c:4a:04:e3:f4:6e:72:
7a:d5:3f:88:ce:20:94:8f:e4:99:b0:ae:b3:47:9e:
3b:8c:4f:66:c7:50:70:0f:01:16:c5:66:ea:0a:41:
d5:49:3b:1c:13:f4:44:72:fc:7f:e9:1d:b9:44:7c:
13:c6:d6:92:59:8e:2f:42:b0:ec:89:8e:4d:79:fa:
02:8f:b4:68:48:3a:f7:c4:1a:83:57:80:7e:04:24:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.2.227.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:df:7a:51:2f:48:b6:a2:bf:f0:99:fb:1c:2a:54:1b:4d:fd:
cc:eb:d3:cd:d8:ff:34:8f:c9:19:8a:1e:95:a4:ee:cd:2b:eb:
27:a7:fd:6c:6a:4e:cb:c4:6b:af:42:5a:ee:bf:11:65:71:9b:
4a:65:2e:c7:98:be:8f:21:a2:3c:aa:b6:6b:9a:76:59:94:4c:
ad:23:fc:f9:39:de:b9:07:fa:2f:39:1d:c8:72:3c:7c:06:ad:
14:74:54:9b:88:fd:c2:65:26:47:e8:7f:14:17:00:4c:15:18:
6c:92:1a:fa:46:a6:a1:f9:25:63:7f:af:38:de:d0:31:53:e6:
70:ee:17:99:cc:c1:c9:db:ec:f9:19:26:49:93:0f:8a:b3:f5:
0d:9b:f0:90:95:03:dd:52:25:4a:d8:4e:e1:a3:fc:0f:c9:c8:
81:a0:93:56:c0:d3:32:de:e1:20:c8:d8:3b:6a:f5:50:78:1d:
c2:6d:0d:06:a4:ae:1f:71:7d:d4:c9:f2:83:25:c9:02:75:ed:
44:6d:fd:5c:49:69:a1:a4:9e:2d:38:c0:df:58:7b:ca:05:ce:
06:b2:ac:b2:b7:7e:4a:a6:07:b8:06:df:17:77:73:a9:06:b8:
be:8c:22:e0:77:9e:54:84:bc:67:a0:87:c2:ff:10:ff:19:ea:
af:26:2b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:50:01 2024 by rpki-client on console-fra.rpki-client.org