Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
File: xn6d6Ogmze4OZfYiWDQ0uBzze60.cer (raw, json)
Hash identifier: fLMXig3mOJarww5cRj9pfmey629NCMo2lAEeQUSVeg8=
Subject key identifier: C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4247A96A0E0D1FCE3176643F37FA89E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.177.140.0 -- 193.177.147.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:7a:96:a0:e0:d1:fc:e3:17:66:43:f3:7f:a8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c67e9de8e826cdee0e65f622583434b81cf37bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:3e:80:a7:f1:ef:c6:1f:d5:b5:10:91:bf:
95:51:55:7a:ce:c5:d5:b7:9f:aa:e8:b2:56:c2:d0:
12:b2:c9:70:fa:6c:06:38:d9:60:19:17:27:05:ba:
69:23:43:5b:50:81:4e:c1:e3:86:7c:bb:9b:bd:e1:
0e:55:14:d8:01:02:d9:a2:35:43:7b:4c:3a:29:1c:
8c:bb:ab:58:77:3c:9a:f4:9f:9e:6a:b2:f7:99:d3:
1e:8e:49:2e:9b:6f:4d:18:7b:50:1e:02:5d:6e:c3:
7e:3a:15:6a:b5:d9:dd:40:45:de:85:a8:fb:02:05:
b1:b4:a9:5f:a5:23:9b:f3:d0:be:a9:e9:a4:e7:68:
ed:55:9e:f1:c7:f1:7b:bb:9a:17:77:50:43:9b:27:
2e:b0:b1:d5:30:50:21:2b:fb:c5:62:24:86:2b:8a:
0d:1e:d2:88:be:26:50:6f:5a:30:ad:26:c0:e3:ca:
96:34:82:3a:08:3e:f0:e1:a0:f2:8d:29:c8:e1:41:
f4:6e:7f:a4:8c:26:81:28:7e:bb:5d:ba:bf:41:31:
47:e3:33:3f:3c:34:36:e5:1d:f7:55:e5:5a:60:d2:
cd:85:fc:2e:01:d6:b1:a2:77:60:ba:26:6c:df:95:
28:16:13:53:8f:02:ec:d1:54:5c:60:c5:79:59:cc:
91:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.140.0-193.177.147.255
Signature Algorithm: sha256WithRSAEncryption
aa:5a:34:dc:41:fe:7e:68:af:25:7d:4a:97:46:41:cc:e7:69:
81:30:46:e9:7f:c4:d9:42:e8:79:8e:1b:a6:f5:cf:74:08:17:
c7:8d:84:26:51:6a:38:aa:14:67:bc:35:d4:58:88:73:2f:9d:
05:7d:67:d9:cd:08:05:6d:60:8d:ab:77:6f:d8:ee:41:fb:fc:
9f:f4:b0:39:3d:53:28:04:de:43:8a:8a:e9:d4:4f:1c:c5:85:
b8:85:b4:b9:ee:2c:c3:b7:98:0f:82:8f:c5:c0:22:78:ec:05:
5a:e3:79:e4:7d:da:f4:80:54:7a:b5:8e:e4:29:f1:57:60:ce:
d9:b0:ef:61:a8:fb:22:a2:e2:e2:28:26:56:69:36:24:74:1e:
5f:d0:8b:b6:27:31:c6:78:a2:1d:ba:bf:98:99:ce:80:b6:9c:
00:db:3d:c6:b1:2a:de:7b:57:7d:3a:4a:73:9b:d2:41:25:4c:
5a:cf:37:76:a9:ba:8c:6d:15:e0:d4:1d:db:41:9c:54:1d:9c:
1f:29:b8:c6:ad:37:87:7c:82:d3:7b:a2:e4:e2:43:a3:ae:ef:
e7:47:85:63:a5:f5:01:96:63:5d:05:34:fc:49:54:3c:9f:eb:
6c:b9:83:ce:25:e5:65:f7:12:c3:1c:89:9e:35:bd:cc:12:f6:
eb:da:35:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:26:27 2024 by rpki-client on console-fra.rpki-client.org