Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
File: 76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer (raw, json)
Hash identifier: DZyi9xW8+JJ72lp1261T+EFq8AaX8ZnSUetMp1p8rEs=
Subject key identifier: EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E9601C9B34EAE777FE7D493226EB66750
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 31 Mar 2024 19:34:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.30.233.0 -- 185.30.235.255
IP: 185.142.236.0/22
IP: 185.165.188.0/22
IP: 195.144.21.0/24
IP: 2a07:85c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:96:01:c9:b3:4e:ae:77:7f:e7:d4:93:22:6e:b6:67:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 31 19:34:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efa842e67147252505f41551f0f735b7f72e3e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:da:c2:0f:86:d0:41:10:92:d9:7b:8a:34:
a6:ea:44:6b:ae:98:ef:c7:1e:4a:80:15:b6:2e:49:
8c:17:17:14:1c:9c:1a:26:10:9c:6e:64:27:05:70:
87:18:b9:ae:92:e3:2d:29:49:ff:a9:41:e9:dd:29:
f6:6d:1c:7a:93:d3:6c:1c:2c:5c:f0:d6:56:5a:b7:
e6:ec:51:f5:2e:f6:f6:fe:2f:0a:55:c3:91:7b:29:
8d:12:d2:71:8e:de:0d:ff:92:f4:e4:de:6b:8d:56:
e2:23:a2:6c:aa:65:2b:67:55:d1:79:9f:c2:60:7b:
01:d9:be:0e:17:06:aa:58:c7:9a:3f:64:f6:0b:09:
da:83:12:69:07:7c:41:65:e5:f4:4c:02:bd:f3:02:
54:e9:eb:2c:d8:2f:a1:a9:b5:77:71:b5:3f:c5:aa:
0d:f5:8d:22:8d:b7:10:dc:91:ac:cf:4f:4f:e1:30:
20:2a:04:a2:01:a5:a8:68:fc:76:62:2b:3a:f6:d1:
02:42:a1:0b:54:0a:05:b2:4e:64:51:de:57:c4:5e:
f6:f9:dc:48:01:0a:2b:d8:e5:e8:ad:18:fd:c2:54:
d9:a1:47:00:e1:d7:32:d8:25:3a:e7:06:50:eb:5f:
47:4c:f7:aa:7d:a4:10:12:b1:a1:a9:86:46:bb:54:
ee:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.233.0-185.30.235.255
185.142.236.0/22
185.165.188.0/22
195.144.21.0/24
IPv6:
2a07:85c0::/29
Signature Algorithm: sha256WithRSAEncryption
68:f5:c5:1b:e1:32:e4:c6:7e:cd:46:f5:91:72:e7:40:c1:84:
51:c8:49:ea:ae:e4:a4:19:e1:00:e0:6d:22:5b:2a:69:79:e2:
bb:68:80:bd:21:7d:0e:ad:a6:7d:03:d0:22:c2:65:29:c1:cc:
39:c5:a4:e9:7a:20:be:10:a6:b8:e8:2f:30:c6:f0:3b:1f:c5:
c9:ca:17:e7:8f:01:9d:a1:f7:15:96:ad:ce:5c:80:c0:f1:d0:
28:ca:17:4b:6f:ec:62:74:21:e8:30:c1:f9:49:bc:ee:dc:d6:
a6:9c:c2:26:b7:2e:57:4a:d1:d0:e1:99:49:8f:7b:71:22:11:
35:78:b9:f6:9b:0a:02:17:20:7e:35:30:4b:a9:78:1a:22:42:
09:b6:52:f5:f4:1f:5f:26:e0:b6:0f:fa:9d:85:c4:be:e7:dc:
2a:b7:c8:b9:5b:32:04:4d:2c:9c:03:a5:d2:f9:7c:06:b1:fb:
49:20:a2:c2:8c:df:02:64:47:f4:7e:ca:8d:fb:c2:eb:52:2f:
5f:cb:27:6e:95:2a:6d:e1:b7:c1:2b:77:63:52:49:ad:e1:bd:
6d:1a:71:7b:9f:2b:5a:a4:f3:a1:59:bb:3d:31:65:92:4c:d7:
82:ee:ac:2d:cd:2c:0a:d1:3c:90:cc:7f:dc:fe:73:04:64:81:
1d:07:ff:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:25:16 2024 by rpki-client on console-ams.rpki-client.org