Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
File: dGNlNVtmVWSiEMNYxooBF7f765o.cer (raw, json)
Hash identifier: wuvYfOs1awi/7PzoX/hnlRY/Woh6q/7CU9DZp62knJU=
Subject key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DCB961C64FC91585EEEB4A19E01635
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.65.200.0/22
IP: 185.120.56.0/22
IP: 185.126.180.0/22
IP: 185.255.176.0/22
IP: 194.124.36.0/22
IP: 212.22.64.0/19
IP: 2a06:c3c0::/29
IP: 2a09:d000::/29
IP: 2a0c:5ec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:b9:61:c6:4f:c9:15:85:ee:eb:4a:19:e0:16:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=746365355b665564a210c358c68a0117b7fbeb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:63:44:a1:5b:6d:14:2b:af:e2:40:9c:3c:
bf:eb:61:ed:e1:33:5b:ea:e2:15:2a:f5:0e:d5:26:
c3:c5:5c:3d:5f:a0:3f:61:fe:df:aa:33:1b:1a:cb:
d1:51:9d:31:e9:6c:ac:90:47:35:6f:41:4f:5b:9d:
44:ae:8c:e7:df:8a:2b:61:54:62:7a:be:c4:95:34:
30:5d:59:54:ac:77:1e:cb:11:47:7b:7a:88:d8:f3:
20:1c:df:68:ad:c0:54:25:59:45:34:5e:3e:fd:af:
ad:38:0a:61:8c:b2:c4:8a:59:3d:ff:ed:54:57:c4:
af:a3:d0:4e:76:3d:00:41:26:df:0b:05:d6:59:d4:
e3:a3:25:89:ad:6b:f0:f9:18:d3:89:10:8e:a0:87:
de:5c:47:2b:74:13:bb:fc:aa:f4:c8:9a:3b:f4:ac:
4c:09:0f:09:2c:b4:9e:08:f4:6a:78:f3:4f:d8:88:
d1:db:b1:60:c0:8c:22:a5:84:4d:cb:cf:b2:a9:a0:
81:0d:18:12:92:5d:ae:ce:1a:7f:ee:ec:03:f8:16:
15:03:1c:0b:ef:e6:a1:6d:e5:56:78:c4:67:24:af:
48:19:63:4f:37:14:5c:bd:c6:1f:59:79:29:25:31:
3d:f4:7f:dd:26:9b:11:14:b0:85:09:88:0c:a9:4c:
30:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.200.0/22
185.120.56.0/22
185.126.180.0/22
185.255.176.0/22
194.124.36.0/22
212.22.64.0/19
IPv6:
2a06:c3c0::/29
2a09:d000::/29
2a0c:5ec0::/29
Signature Algorithm: sha256WithRSAEncryption
a3:b2:72:07:21:95:97:99:02:1f:61:08:4c:c7:c2:34:78:b7:
61:9e:19:db:57:58:a7:c6:f1:45:45:de:ed:53:d9:b7:00:7c:
3e:c9:86:b2:0f:79:fe:cd:3c:b4:dc:e1:9e:76:9e:53:8f:93:
48:4c:c8:50:51:a0:c4:2b:93:55:61:a3:0f:f4:9c:12:df:c5:
c7:b4:bc:58:52:38:26:a6:02:7c:0e:e1:26:93:93:cf:9f:5f:
d8:27:f6:53:3d:d6:59:d8:a1:1c:8f:1f:6e:6a:5e:6a:60:78:
34:8d:f2:bc:c1:1e:13:6b:ab:d6:37:f7:42:f7:b2:bc:a7:59:
ef:3f:8b:6d:55:29:03:02:ec:d8:5d:c1:15:d1:48:91:9f:f6:
07:42:1b:75:91:a1:42:3d:4b:64:ee:cf:5d:2a:96:a6:7b:11:
46:21:ad:ed:94:a7:e1:17:3a:5f:f4:44:16:f5:ac:f2:a0:ed:
41:3e:47:b1:87:2d:c9:34:e2:70:2f:58:61:44:99:01:de:4a:
f6:18:a1:dc:1f:35:33:df:91:48:a2:b6:e9:95:ae:bf:d0:36:
40:dd:79:6c:37:3f:92:b2:63:63:a2:60:47:92:cf:cf:d0:fd:
9a:85:67:69:95:c0:28:b3:e6:a8:a1:3a:3f:8d:d4:4b:ec:ed:
80:0a:2c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:58:58 2024 by rpki-client on console-fra.rpki-client.org