Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer (raw, json)
Hash identifier: eZ7h7t09cfvTNeQhD2i7QhXUU2UUywlDLqb0XfrUbs0=
Subject key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D3F5E1DCADFB09D27261959355390
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 134.0.72.0/21
IP: 151.106.224.0/20
IP: 185.16.216.0/22
IP: 2a03:d040::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:3f:5e:1d:ca:df:b0:9d:27:26:19:59:35:53:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:c8:66:9b:28:f3:25:d8:06:13:9f:65:21:
e1:c2:2b:5d:ad:0f:3f:6e:3c:ce:35:9b:5d:0e:b4:
07:86:94:43:83:a6:8d:03:a9:22:99:4a:50:6f:8e:
a3:05:0c:a7:bd:10:39:a5:96:9a:65:01:2c:2e:b0:
64:b5:8f:95:16:43:af:6a:bd:92:41:c7:0e:98:ba:
56:eb:a5:12:ae:dd:50:5c:b1:98:aa:1d:76:4c:d1:
73:2e:1b:0d:6f:5f:5f:eb:c0:d4:a5:32:77:5f:db:
f8:0f:8a:89:44:82:ee:10:95:5d:cf:70:27:5e:68:
ab:f0:14:ff:b6:21:e1:4c:06:91:57:dd:22:06:f7:
51:2b:7a:b8:fd:f0:01:64:63:2f:74:b2:5f:f8:e7:
17:48:36:e6:f1:f7:4c:a0:81:0a:b0:5e:11:e5:cc:
7b:2e:57:6a:57:cc:c8:0a:0d:67:e9:83:22:34:8d:
52:1f:eb:51:1f:42:8d:6d:52:fe:34:69:7d:ca:19:
74:0c:22:0f:b5:81:cb:36:70:eb:25:2e:b2:eb:2c:
c8:b4:1e:60:e2:a9:80:c2:89:8e:70:59:7a:5c:3b:
df:47:38:61:b1:02:ee:96:44:a9:2d:bb:3f:00:b5:
24:e5:d6:c8:50:a3:3c:c9:ba:54:38:54:9c:bf:8b:
86:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.0.72.0/21
151.106.224.0/20
185.16.216.0/22
IPv6:
2a03:d040::/32
Signature Algorithm: sha256WithRSAEncryption
70:ad:54:de:25:05:bc:9d:3d:90:ec:24:fd:2e:fe:85:20:bb:
fc:29:ff:03:00:a5:10:23:cc:4c:a0:fb:bd:d5:1a:41:ee:4e:
83:66:d4:f2:ad:68:ac:c7:78:2f:8f:1f:8e:7b:40:38:7c:7e:
e1:5a:c2:13:4a:bf:c0:00:a8:30:3a:8e:71:70:77:72:73:c0:
6d:a2:89:34:8c:2e:dd:df:38:a9:20:94:55:ad:ab:e7:fb:ca:
81:47:bb:bc:25:b0:5b:16:35:5d:22:aa:84:e3:03:3b:b7:ac:
7c:de:2c:a3:c1:0f:df:84:5a:ee:62:ec:8f:db:a4:09:87:8e:
c2:65:35:66:d9:0d:99:f3:d5:d7:d4:1f:07:86:6c:b4:64:a9:
8c:f5:77:85:d0:0b:ec:c3:82:39:71:27:a4:b6:36:48:a4:57:
a7:5e:45:31:d7:5f:a7:74:e3:b2:e1:25:3b:2f:a8:ef:2a:f3:
9d:37:5f:c3:6d:2f:fe:f5:64:e2:08:77:4c:04:16:2c:ac:93:
5b:82:f6:1e:43:ca:df:bc:99:bc:82:b7:cb:5a:5f:fb:2a:40:
62:7e:b0:67:0f:29:07:99:c3:20:a5:9a:1b:13:3e:e2:59:c1:
4c:4a:20:4f:23:44:f2:73:6f:86:a4:fe:6c:02:b7:87:95:5c:
02:95:e5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 20:15:43 2024 by rpki-client on console-fra.rpki-client.org