Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
File: 04G3AXBRkLnOnRsYRTU4TnHKMWU.cer (raw, json)
Hash identifier: 6CdgFo2J9GQ0n4Qid+DYh2HTJHlh62O6lfWVjkMnMeA=
Subject key identifier: D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80210458109945CEC2A156315CFA173
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.23.8.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:10:45:81:09:94:5c:ec:2a:15:63:15:cf:a1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d381b701705190b9ce9d1b184535384e71ca3165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:f0:b2:c8:53:73:3a:16:61:4a:14:5d:5b:
46:46:f2:93:d6:1c:bc:82:a4:29:0e:86:15:95:91:
e7:e9:32:1f:7d:c9:9c:5e:28:92:e2:c8:60:be:7c:
b8:47:76:29:80:45:52:76:1d:9a:64:bf:e8:b1:bb:
de:8b:c3:ac:08:e3:b9:85:4c:b6:62:99:10:9a:4e:
53:db:bf:da:51:6b:db:7c:60:38:38:15:eb:48:1c:
4a:96:a3:87:cb:ed:ce:c7:d0:82:ab:76:b3:47:89:
14:eb:43:87:b0:b2:60:99:21:53:6b:5e:5c:82:c0:
94:46:a0:9a:77:da:d0:c9:1e:08:31:14:e9:6a:b5:
09:ab:88:ff:6d:eb:cc:38:c6:1b:67:44:42:97:f0:
e7:6d:ac:cc:d1:23:52:a3:64:f0:db:27:37:16:d7:
b3:c1:c4:b4:f0:e2:37:83:07:16:3b:0e:c7:b9:54:
d0:d5:10:58:e2:7c:3f:3f:f6:38:5b:a1:0e:9f:30:
a7:f0:b7:f7:9e:07:ce:b1:05:63:f8:04:37:f9:f3:
a7:39:1e:4c:d3:e5:b1:93:06:56:f0:11:88:95:af:
34:a7:9a:5e:9c:ba:9c:4d:a3:23:d8:ad:77:7a:c8:
dd:81:23:60:2d:b4:f7:79:1e:62:81:a9:da:c1:15:
06:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:c1:f1:45:9a:85:b1:bb:ec:51:54:35:57:04:2f:b6:8f:b7:
45:3b:0a:59:80:a2:3d:bc:f3:20:49:c2:81:4e:80:7d:28:67:
8c:ed:ec:a7:71:18:0c:4a:e6:1f:d3:9b:23:7a:51:c8:48:53:
cf:16:71:a2:bd:d2:62:61:65:9a:97:a6:1d:b4:9c:14:46:e0:
3f:1c:07:75:c9:67:c6:4a:3e:ff:90:9e:e3:f6:18:5b:df:a3:
99:db:ff:d6:4b:97:8d:d4:80:9f:04:5d:40:77:36:60:4c:6e:
f9:b9:2b:f1:ad:04:63:42:a3:83:0d:6e:44:93:3b:2a:3e:5a:
7e:c6:01:3a:a2:1f:ce:90:19:d5:43:18:a1:64:2c:a4:34:78:
29:ee:db:92:9d:36:3d:84:28:23:bc:96:d1:1d:75:1f:0e:e0:
7d:bf:ea:f5:aa:51:da:43:98:ba:bb:60:01:cf:dd:cb:b1:64:
f5:f9:b8:ba:4a:f7:27:e9:e3:59:c1:5e:a3:06:09:e0:f6:16:
56:32:16:2c:e2:d0:83:05:19:9a:bc:56:59:ba:fb:ad:fe:a1:
41:4b:7c:38:89:50:e8:dc:71:97:35:01:69:6c:5c:3a:16:44:
6e:f4:6e:7e:ab:fd:8f:58:d4:fe:52:a6:2f:a5:f0:fe:2b:9e:
e8:f2:96:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:00:50 2024 by rpki-client on console-ams.rpki-client.org