Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
File: GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer (raw, json)
Hash identifier: DaN6W+Ier9NGrqd2Ty9tdzcN767eGZBByXJxWdvTg2I=
Subject key identifier: 1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A7D38D1590E4F1EFAD8E687C59C5C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.49.76.0/22
IP: 2a01:9fa0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:7d:38:d1:59:0e:4f:1e:fa:d8:e6:87:c5:9c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:04:48:52:08:ba:e0:04:8d:d5:0b:34:d0:af:
07:f3:86:cc:01:1d:a0:5a:fc:17:ac:ce:ff:bf:02:
1c:cd:fc:cd:e7:db:30:21:4c:fa:e2:94:76:67:de:
58:be:fd:60:54:43:32:17:c6:d2:cd:b9:a3:69:49:
5f:7b:12:a7:7c:f8:61:60:71:46:f7:62:4e:95:71:
ca:01:af:fb:e4:a5:a8:aa:62:3a:34:53:a9:60:82:
d8:0f:1f:a8:ab:5b:2c:ac:0d:a4:a1:60:1e:50:79:
42:fd:c2:6a:dc:b5:83:14:f5:05:36:bc:38:64:60:
9d:c0:4c:f5:d2:12:76:3b:ce:ae:34:8b:35:e4:d0:
63:93:49:55:f6:4d:2f:0d:e7:2d:90:10:15:59:0e:
2b:ad:ca:56:ce:20:f9:b3:85:ea:01:99:13:7d:1f:
c6:ca:ca:b6:a7:ab:0b:a6:c5:ea:91:6e:f8:db:99:
56:d2:b5:fe:65:02:87:1b:29:6b:a4:b6:47:e6:e1:
b7:c0:7b:42:3e:2c:17:82:9c:fd:05:46:0e:09:98:
9f:3d:6c:7f:ed:16:71:bb:67:b1:57:d8:13:05:bc:
0d:08:b0:ec:71:6c:85:90:ef:f9:af:6f:8d:c2:11:
c8:67:36:46:d1:53:71:2c:b9:7a:36:d5:54:33:90:
4a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.76.0/22
IPv6:
2a01:9fa0::/32
Signature Algorithm: sha256WithRSAEncryption
6c:a4:1b:5f:3d:a4:e8:a9:20:2a:2f:be:54:b0:8e:80:c3:a5:
c0:06:9a:43:8a:86:39:a2:7b:f0:b5:e5:b3:0b:45:42:69:bd:
0d:f9:22:fc:ac:f5:5a:cf:22:bd:6e:1f:8e:e1:0b:1f:f6:0f:
69:24:0d:3b:3b:6d:6c:e1:f5:e8:c0:03:e2:af:5b:a3:67:05:
d5:bf:2b:92:c1:dd:79:c9:0a:33:67:46:15:27:83:cb:17:33:
f6:40:4a:c5:8f:b5:97:12:c3:82:f5:e2:8b:e7:7c:9c:40:16:
b6:c5:01:1e:49:7c:67:b5:ca:50:f0:c7:00:90:ff:21:d4:81:
ff:98:3a:07:fa:b3:7a:3e:89:e5:33:88:c3:60:4e:72:2a:f3:
7b:6f:3a:e7:b2:00:ba:9b:b5:ca:4f:6d:90:85:65:a6:57:ea:
53:8a:0b:16:73:60:23:9a:fc:05:e7:ef:0b:66:4e:9b:45:38:
4a:ef:e8:61:f8:45:a6:e4:ef:64:45:ee:16:97:dc:54:c9:05:
f7:5d:08:fa:6c:5f:43:99:93:6f:8f:a4:d6:af:1e:95:b8:4f:
86:12:f0:63:67:59:ba:22:af:a7:7f:d5:b9:98:43:8f:20:75:
49:ad:36:0c:8d:39:6a:23:b9:d4:0c:1d:bd:fd:ad:8f:1f:d8:
2e:05:17:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:21:28 2024 by rpki-client on console-ams.rpki-client.org