Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
File: 1a8gwCbeEE2W8XrLr054fvnTAgY.cer (raw, json)
Hash identifier: hQ0nvs80qP37uoYFP0RC6sk+/w/3kkOCi5QHiktBfos=
Subject key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC4144A88EC3705AD4A011EA9B43AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.154.160.0/22
IP: 2a07:8e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:41:44:a8:8e:c3:70:5a:d4:a0:11:ea:9b:43:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9c:ba:1d:db:9c:6c:96:39:a9:a2:e7:ac:bd:
cd:2a:9b:30:ad:a1:3b:0e:c4:3a:60:76:58:c1:63:
59:5b:2e:f3:20:d7:6f:a5:28:26:a5:66:54:f8:be:
3e:05:83:c5:e8:4d:bb:97:75:32:9c:0a:83:dc:7c:
27:ab:63:c8:e5:c6:e3:a5:f2:b2:08:e1:bb:2e:40:
c0:0f:da:ae:62:12:93:d3:79:0a:28:90:3e:b7:5f:
15:39:a1:74:e3:c0:ac:91:71:8c:91:e5:2d:8d:fd:
94:33:27:8c:0d:6f:fa:12:a1:1f:ea:08:49:f9:8e:
ca:28:d9:b7:d0:83:e9:ef:be:b2:03:fd:f1:87:db:
e3:a0:de:05:3f:38:70:ba:de:88:83:d5:20:15:18:
56:ad:60:22:1d:14:c6:ca:c5:cd:d8:16:40:18:e9:
0b:15:e2:7d:62:bc:7b:de:f4:13:0c:f7:97:ba:0f:
19:35:63:d0:30:cf:81:7e:40:7c:5b:6b:04:5a:e5:
90:c4:52:95:28:48:b9:0c:2d:bb:37:79:ec:85:4d:
9f:aa:82:f5:11:92:87:8d:a1:71:14:c3:2d:2a:43:
a1:f7:32:46:de:57:bf:ef:9d:90:6b:d6:3f:f3:ed:
ee:a7:74:ae:6e:3c:34:c2:d2:c1:e2:85:6f:ba:b9:
49:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.160.0/22
IPv6:
2a07:8e40::/29
Signature Algorithm: sha256WithRSAEncryption
a3:36:be:78:75:85:de:12:b8:9a:b0:d9:a7:7a:34:8f:31:8f:
ae:f5:7e:42:11:f7:8e:33:e9:bf:50:e9:01:30:13:83:78:ec:
56:c9:53:b3:7f:55:d0:9e:29:f6:38:cd:77:cf:36:e4:41:b8:
7f:38:2d:76:a4:36:fd:02:91:f5:bd:2a:3a:e4:a1:43:8e:17:
4f:56:5a:bb:32:a0:6f:e6:a4:60:a8:d2:9b:de:be:8b:a9:8c:
5f:7a:0a:d1:b9:9e:47:23:26:3e:91:88:68:93:e2:e8:37:bd:
75:85:1a:17:4d:55:b9:a7:5f:5a:b6:4e:55:68:ea:32:8e:fc:
b0:1c:95:4f:de:06:90:f9:5f:32:12:bb:51:5b:f5:cf:c3:b7:
7f:10:c4:a1:4d:1b:d4:45:64:4e:9c:15:1b:96:89:5c:92:58:
54:0f:18:09:55:1b:cd:1c:9e:3d:95:4c:71:3f:cf:fa:29:00:
6b:ec:29:8f:4f:2e:fe:31:05:61:0f:87:55:4e:14:e9:d5:09:
a2:75:7b:ca:2b:18:bd:18:ea:99:e1:07:e9:0e:31:e7:6d:31:
1f:7b:cc:e3:63:ed:9d:2a:f0:59:63:20:b7:13:75:f6:f7:41:
c4:41:51:9a:cd:26:c4:c7:f1:9e:e7:3f:b2:9d:89:56:a5:db:
cc:28:f2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 22:26:26 2024 by rpki-client on console-fra.rpki-client.org