Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
File: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer (raw, json)
Hash identifier: eZNi6Fctr+gatYaCWNynGOwSrWzvuz9dhkfCp0PHShs=
Subject key identifier: CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D7FA130B71A8B640FB5522FC65775
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:30:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.201.128.0/22
IP: 195.93.158.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:7f:a1:30:b7:1a:8b:64:0f:b5:52:2f:c6:57:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca2ded27751f291c0b55b79457207cb3a255197c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:39:3f:59:db:64:c6:25:86:3a:c6:d1:39:
e3:25:7f:b8:7a:d3:ef:8a:76:6c:63:5c:3f:9a:ff:
67:1a:ec:fb:44:b2:73:bb:85:6f:0d:cf:c3:5f:f4:
e2:f3:eb:cf:6d:5d:03:54:4c:e4:45:7c:09:02:ab:
c6:9c:0f:79:29:38:0e:db:5b:19:8c:f8:6c:6e:11:
a9:5f:93:36:ab:1e:bd:f5:63:9f:c2:e6:2b:44:24:
6c:7b:28:8c:2f:a2:9f:18:33:8b:77:a7:13:ac:65:
13:00:69:73:3e:e5:85:55:af:53:3d:ba:a8:1d:65:
eb:5d:b0:3c:49:9a:64:74:25:05:3d:bf:79:b1:05:
55:51:1e:7d:c4:a1:a4:6f:c8:19:8d:18:61:e6:af:
79:41:a1:40:e6:08:2d:72:77:4c:c3:62:0d:b8:3b:
46:2a:4d:52:22:02:f1:ac:44:e4:81:a4:1e:08:af:
10:e5:b1:da:37:55:21:6b:38:04:75:65:f4:d4:d4:
05:95:db:db:d7:45:cd:11:36:bc:34:71:36:df:20:
3f:cd:64:71:d1:95:fb:ef:49:93:54:5e:74:34:e7:
2e:da:91:e8:04:8b:f6:a8:2d:74:ab:c5:82:65:58:
93:14:b3:d0:e2:74:da:63:79:2b:32:e3:83:e5:0c:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.128.0/22
195.93.158.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:28:be:4d:0b:76:41:6b:f9:03:a2:92:26:f4:e1:d8:b4:67:
b6:14:20:15:4c:5e:fe:4f:cd:08:05:bf:71:64:ef:73:7e:a7:
84:10:be:e7:cd:1a:7f:c7:c2:c5:de:9c:4a:17:60:46:4e:e0:
1e:5a:34:d9:ac:69:77:87:4f:96:5e:cc:0d:5f:95:c0:09:c7:
e4:6e:6f:82:54:c8:fc:a7:70:6b:a2:63:c6:60:7e:b5:07:b0:
d4:a7:38:66:59:96:6b:9f:da:f6:e3:33:5d:36:00:ac:14:aa:
53:8a:0d:f0:68:06:71:64:8f:85:25:56:ab:5d:79:2c:a0:cd:
5e:3c:4b:68:11:0f:81:c5:13:a5:22:aa:5e:40:b6:96:93:4d:
b8:51:36:f4:9b:f8:cd:93:90:50:41:dc:0b:1c:ed:a9:a6:bd:
ac:93:cb:44:5b:13:36:2a:1f:71:03:f7:19:8a:97:7e:e3:7f:
31:8f:b5:f1:90:99:5e:ed:ff:9f:6b:e7:e7:6f:d9:58:95:f0:
78:e2:9e:38:02:0b:43:24:97:63:e3:c2:6b:f5:90:3e:3d:b7:
f1:d4:c2:80:2f:b3:9b:dc:0d:80:3e:b5:80:a0:37:2a:cf:ae:
fb:fd:23:d7:38:13:1e:5f:0d:06:09:64:ee:ff:01:67:25:95:
bf:a4:b9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:07:57 2024 by rpki-client on console-fra.rpki-client.org