Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
File: x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer (raw, json)
Hash identifier: ow5Jpm/EK4ZttRrcuU8Wjap2biyO/LKd7Mwbi5KU70Q=
Subject key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B11EDEB987B1153D294CC1FA2BD4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.33.63.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:11:ed:eb:98:7b:11:53:d2:94:cc:1f:a2:bd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:d2:e5:83:79:0c:bb:ea:6c:7a:dd:87:b8:
f2:7c:69:c5:06:d2:1d:c4:dc:f7:62:18:16:26:1f:
1c:3f:2d:36:ae:4a:d7:3a:34:01:e6:48:98:a6:21:
dd:cd:d5:1a:55:7e:30:be:62:08:9a:f1:36:f5:34:
f8:f5:89:6c:67:df:3b:38:12:e5:1b:76:85:d7:62:
f8:a0:54:08:40:e6:56:c6:ad:74:88:13:a8:e3:01:
ac:32:60:7f:93:be:8b:b3:ec:60:28:9e:69:f6:c7:
6c:4b:6f:d4:52:91:73:e0:2d:01:23:b0:88:81:fb:
5d:39:dd:7f:9a:fc:78:c2:3a:2e:a4:6f:fe:3e:88:
88:c1:a7:af:e3:a4:7a:c0:08:3a:46:76:82:a1:1c:
c4:05:8c:bb:f8:a6:e3:16:2e:f9:fe:0f:94:05:b7:
46:a2:d3:a0:7d:dd:e8:c0:65:c8:d9:89:2d:51:fe:
c2:9c:f4:fd:be:a0:f6:bc:c9:ed:3e:42:3e:53:95:
66:2d:fe:3e:05:2c:af:c3:03:6b:39:2c:d3:a8:cc:
8f:84:6d:56:97:29:b5:db:35:5c:12:fa:11:93:f8:
cc:68:b3:8b:31:7f:b3:ac:07:33:ce:d0:10:98:3c:
98:00:54:8b:35:34:df:96:ce:83:93:e7:39:ba:f4:
a3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.63.0/24
Signature Algorithm: sha256WithRSAEncryption
69:4c:ad:8a:4b:49:7d:68:15:b3:2d:e4:bc:3c:3e:c2:b6:b6:
2e:ba:56:14:30:2c:75:28:86:5c:f4:5a:ee:33:a7:86:2e:e3:
32:65:f0:8f:3d:07:69:79:09:5e:b7:c6:8d:05:14:82:b6:4f:
df:a1:4a:7b:b5:05:96:a5:04:6c:23:0a:de:95:6a:87:1d:d1:
e8:3d:d7:db:10:d0:e7:c6:ea:e2:d4:b2:29:46:d2:15:d7:a1:
0c:ee:fe:e5:c6:b1:d6:4a:9b:3b:48:49:d2:3b:b8:6a:44:25:
a3:e5:91:90:dd:23:5f:ba:49:06:df:5f:23:db:2e:18:0e:db:
a7:b9:47:2f:b5:db:37:ec:73:17:3f:bd:d5:82:93:3e:81:fd:
c1:44:17:fd:64:fe:e3:57:5a:bd:bd:ac:dc:8c:54:10:79:d8:
a1:1b:e3:21:7e:05:62:eb:65:56:c2:24:1d:99:e5:63:93:e2:
9f:8d:00:ac:51:c2:2e:9e:1c:2d:e6:f7:3a:07:f5:0a:db:d4:
45:39:b4:60:b5:54:dd:ca:89:11:70:83:86:06:43:d5:73:67:
5f:89:ba:fb:a9:e8:e6:d8:f8:24:e2:af:51:5a:bc:23:1d:58:
18:f3:69:fc:19:96:b6:21:9d:f8:fe:26:8d:b6:73:8b:41:89:
45:fe:59:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:42:04 2024 by rpki-client on console-ams.rpki-client.org