Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer (raw, json)
Hash identifier: vg3x7smhd3gLWTzPI/5f3lvxFSRsKdivXzgJm02qyyA=
Subject key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D831B37FCCDC91BFFECADCBDD1A20D387
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 07 Feb 2024 10:26:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 157.97.68.0/22
IP: 185.20.236.0/22
IP: 185.232.188.0/22
IP: 2a00:5320::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:83:1b:37:fc:cd:c9:1b:ff:ec:ad:cb:dd:1a:20:d3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 7 10:26:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:77:94:6a:8b:ee:05:f9:d5:77:b1:08:86:
96:8e:0e:9d:ba:b4:7d:8c:de:b3:00:9e:86:8b:fe:
0d:ef:49:03:f8:e8:d5:47:28:f8:e7:01:91:68:78:
09:04:c9:76:74:d2:e5:ae:6b:57:ed:ef:77:b4:14:
3d:e0:eb:cb:9e:6c:b8:f8:45:dd:e8:86:66:7e:10:
05:c3:62:b6:0e:0a:41:5e:34:9c:91:74:89:c8:3e:
0f:e3:c4:7c:57:63:8c:5b:eb:93:0a:36:31:8c:e4:
ef:55:78:b2:ff:f1:3a:78:3b:f8:1f:b5:16:89:0f:
8b:f6:3c:92:04:c3:bd:87:d7:20:c1:f8:3c:6b:da:
35:b8:15:13:de:2f:f6:42:11:35:96:51:a7:cb:07:
8c:9a:fc:28:e5:81:4c:51:61:a5:ae:1c:ec:c9:69:
1d:d8:6b:d0:b0:b4:bf:05:fa:e6:b1:63:51:eb:bb:
f8:06:81:6c:17:60:07:8a:ac:94:c8:09:c8:ef:e9:
10:ca:ce:20:93:18:29:bf:47:31:f5:b5:51:a6:a8:
8a:b6:ea:37:56:ae:0f:ab:dd:05:d3:eb:a2:3e:07:
13:68:c2:07:87:cd:95:c7:d0:7e:05:46:8c:b2:8c:
ee:60:f5:7e:9d:21:39:91:80:3c:68:3a:7c:41:76:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.68.0/22
185.20.236.0/22
185.232.188.0/22
IPv6:
2a00:5320::/32
Signature Algorithm: sha256WithRSAEncryption
27:7a:85:f4:e5:c9:63:95:e4:d4:36:59:3e:6f:28:b5:36:a0:
87:bb:c5:4f:97:e7:99:33:65:d8:77:b7:b8:5b:c9:28:44:8f:
7c:39:8c:6b:3b:4c:f4:e6:2e:24:58:c4:38:be:3c:1e:88:92:
45:3e:6b:cd:3b:5c:85:ae:6e:d6:d6:a6:ee:71:60:3e:6a:a6:
ae:56:dd:e9:6e:ef:ed:57:c7:2d:9f:fb:dc:d4:cc:55:4e:ae:
e3:55:5a:b5:21:28:a7:79:33:fc:d5:ca:d4:73:d3:be:fa:2c:
57:49:2b:d1:b7:ae:31:cf:03:7a:df:4a:34:d1:45:59:05:20:
6e:d9:96:f4:da:70:c3:b5:d0:cb:48:63:36:c0:9b:54:2a:4a:
df:8b:d3:3c:c7:8f:2b:a6:8a:f2:2c:09:c8:22:b1:25:c5:31:
fa:40:8d:d5:ba:d2:48:ce:ad:f8:20:be:1c:ea:a2:35:90:64:
a8:87:36:0f:91:a2:fc:af:fa:34:d7:31:6c:ef:84:72:95:70:
5b:a1:d2:b9:a8:6a:dc:87:1b:5c:30:e6:b5:a6:13:74:b5:5b:
99:0e:6c:57:25:6b:20:9e:f3:67:97:fa:b1:9b:ba:86:ba:9a:
00:22:2e:6a:96:99:2b:dd:94:91:96:bc:60:79:4b:52:05:5c:
59:cf:54:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:22:08 2024 by rpki-client on console-ams.rpki-client.org