Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
File: 8gwo0Z4N-1NIJqojqlBq9oowW3o.cer (raw, json)
Hash identifier: /IuIAPNExR/OBgy5al1zxxQxvYU1UMG50+Ub6v8j1P0=
Subject key identifier: F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726D0426F1196447ECDA3D86B276124
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 138.63.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:d0:42:6f:11:96:44:7e:cd:a3:d8:6b:27:61:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f20c28d19e0dfb534826aa23aa506af68a305b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5d:c0:07:d9:0a:cb:be:99:41:b3:e4:33:9f:
7c:ba:8a:6a:a6:cb:3e:96:60:d3:1a:5a:23:25:e1:
f2:56:2c:ac:9a:7f:2c:e7:9b:12:5d:1a:a0:24:7b:
ac:53:d6:32:43:14:83:80:62:19:22:60:cf:09:a5:
a2:30:bb:d9:f2:9d:64:b7:48:09:d1:95:04:a6:0c:
43:d7:0a:f5:71:bc:af:a3:af:60:ab:6e:80:1e:66:
0b:91:92:2e:7a:68:b0:3a:00:42:10:34:03:63:88:
af:81:d8:97:1b:30:46:ef:e8:5f:e1:69:95:70:be:
64:38:5e:a4:46:14:99:ce:25:11:94:51:c8:b3:2d:
7e:eb:bd:49:91:6d:da:ff:10:5f:39:21:d3:3b:ff:
7f:d6:59:54:94:bb:68:a8:29:95:db:2f:52:5c:43:
e0:ac:f3:03:ca:b5:60:04:41:80:f7:3c:44:62:90:
e2:fe:97:e0:3b:ae:ef:5c:07:bc:9d:25:eb:b6:8b:
6a:c6:29:7a:d9:a0:d7:3d:5a:f5:bb:f7:43:41:19:
99:7f:4a:8f:e9:dc:6e:ad:8a:f6:94:b0:b8:ca:5b:
79:7c:c8:58:da:f0:8e:14:9b:fd:50:07:5e:24:85:
17:3c:54:6a:74:a5:37:01:07:7a:5c:25:4d:e4:ad:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.63.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1b:6d:0a:87:fe:4f:cc:1b:76:b0:14:d1:65:eb:c9:0e:81:73:
4d:d6:7a:e6:fc:da:31:be:9e:ec:40:cd:24:8e:d5:94:2a:61:
9c:c6:84:a1:dc:b2:e6:bf:51:e0:ac:89:48:9e:97:17:e0:03:
30:95:7e:6c:4d:84:16:26:88:73:24:02:33:2a:1e:b6:ae:66:
66:b4:4e:e9:d0:68:61:cc:5f:d7:73:fd:42:39:ca:57:e8:2a:
ce:fd:a0:96:cc:e3:db:5f:7d:84:9b:d0:32:ac:8b:10:73:6c:
58:03:e4:24:d2:a9:eb:6b:1d:83:4f:9a:2e:08:5b:c5:70:c9:
aa:09:4f:d3:2c:5f:8d:61:4f:7f:9e:37:02:75:39:63:e8:1f:
5e:81:3b:33:ee:c9:43:85:6a:d4:fa:a1:9e:23:3e:a0:91:d2:
dc:f8:d9:2c:a4:da:5b:db:3d:b2:99:bc:58:32:12:a2:a7:7a:
ee:21:d5:f3:5b:c6:86:00:9f:e0:3c:ab:87:7e:47:ea:c6:36:
f0:10:72:a2:4a:07:d9:99:85:b9:ae:5f:36:02:87:20:e1:08:
f1:c5:f1:0d:50:dd:da:8a:38:f2:c6:8d:2f:07:15:89:20:38:
92:8f:6d:c3:da:64:3d:65:e3:d2:2f:e7:b2:58:0d:9f:3a:cf:
a5:53:ce:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:06:46 2024 by rpki-client on console-fra.rpki-client.org