Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KGS7NPtdFsqdH6P5eUy0jUvthHM.cer
File: KGS7NPtdFsqdH6P5eUy0jUvthHM.cer (raw, json)
Hash identifier: Vp6YwtdGc8SI0z2MK27SOWSGGuT3tLRj+HQhkRTnPwg=
Subject key identifier: 28:64:BB:34:FB:5D:16:CA:9D:1F:A3:F9:79:4C:B4:8D:4B:ED:84:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F3D4FBC83D64D74865D67A021D2BCD6E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 03 May 2024 07:16:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2.58.146.0/23
IP: 45.11.68.0/22
IP: 45.88.128.0/22
IP: 194.99.58.0/23
IP: 194.99.66.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3d:4f:bc:83:d6:4d:74:86:5d:67:a0:21:d2:bc:d6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 3 07:16:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2864bb34fb5d16ca9d1fa3f9794cb48d4bed8473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:1a:f0:1c:f8:0c:37:1a:61:16:1c:f3:22:
cd:e0:c0:b3:8e:95:e8:6e:af:a8:63:ad:f6:32:9f:
84:a7:64:99:95:6f:17:d1:86:11:77:a1:fc:c7:17:
80:3e:80:1f:e1:ef:03:c1:12:40:05:b9:bd:46:e3:
a3:45:86:41:48:a4:e0:bb:b7:d1:f7:68:40:e9:5e:
b5:32:38:cd:ed:3d:b4:ba:ce:56:7c:2b:51:b3:3b:
ae:5f:f0:26:00:0c:20:14:1c:32:b1:be:f3:99:76:
ca:3d:14:50:c3:57:be:ab:6f:eb:60:0f:7a:50:8b:
f4:c4:8d:08:a4:9e:53:6d:66:32:9b:7c:51:8c:be:
93:5f:58:69:f0:0c:0f:5e:e2:ba:f0:3e:04:fd:89:
47:c4:67:e1:1b:54:6b:b1:83:fc:2f:87:0a:40:3a:
9e:6a:74:bf:6b:e8:46:c9:68:df:26:2d:ef:ef:25:
0c:b0:1c:c0:91:96:1b:e2:a8:94:40:1f:01:cb:c3:
7c:30:d1:f5:57:19:21:d4:fd:bb:b8:34:94:65:55:
8b:e4:fa:84:36:3d:c6:50:8f:3e:5e:55:3e:c7:ee:
ee:d5:f2:6f:d4:c2:6f:dc:a3:ae:b4:97:41:52:28:
5e:ff:63:ed:b7:fc:89:1f:c0:f6:e9:05:64:54:8d:
fd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:64:BB:34:FB:5D:16:CA:9D:1F:A3:F9:79:4C:B4:8D:4B:ED:84:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.146.0/23
45.11.68.0/22
45.88.128.0/22
194.99.58.0/23
194.99.66.0/23
Signature Algorithm: sha256WithRSAEncryption
84:f1:59:ba:f2:25:a2:ff:02:21:81:ca:f5:60:28:fc:8d:cc:
08:2a:f5:84:9a:d5:53:08:b3:bd:1f:4e:bd:12:78:10:86:ae:
0d:1b:25:7c:39:03:4c:a4:41:97:95:33:b9:59:9e:ab:85:9d:
19:27:14:73:d9:50:3d:97:cd:3c:a5:fb:df:20:9b:87:db:28:
65:94:bf:15:02:30:80:d7:83:bc:9c:f7:6e:34:ec:81:27:9f:
07:27:5f:3e:ed:6a:01:d5:00:e1:eb:26:86:37:f0:a1:2c:81:
a6:81:58:fb:aa:46:81:11:e4:b6:03:b0:8b:f0:dd:fb:df:2d:
3f:c1:c9:d9:03:62:e0:50:e3:81:ef:b4:db:ac:ab:79:3c:89:
bd:a1:ef:57:b3:43:6c:85:69:a7:e3:1e:69:73:5e:6e:f8:3c:
86:20:57:29:a8:bb:96:49:c5:80:f5:e3:06:2b:09:42:2b:74:
bb:87:68:08:3b:86:e0:15:c1:de:7f:7a:ca:e6:86:ff:86:9d:
6a:16:0a:3c:63:f4:75:f9:6d:32:eb:11:40:f6:39:39:7b:72:
c5:85:5b:b6:83:22:3a:bd:8d:38:df:20:52:14:ac:7f:cf:d1:
f3:89:a0:a1:e4:04:04:83:00:d8:ed:c1:02:1a:0e:4d:2c:3f:
04:9f:1a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 17:47:39 2024 by rpki-client on console-ams.rpki-client.org