Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
File: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer (raw, json)
Hash identifier: o5ec9ou90HyIiCjX4wI0Wl4QPVtUVu8YZPRcb+Oak3M=
Subject key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAC02C28C4FF8F9BE284C6BE536CB8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.208.220.0/22
IP: 2a09:8ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c0:2c:28:c4:ff:8f:9b:e2:84:c6:be:53:6c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d2:f6:9a:12:a9:09:3f:0f:1a:26:a3:ca:df:
5b:8a:3f:65:5e:25:5b:b6:b6:76:95:b7:3d:00:24:
f0:37:c8:09:19:a2:9a:17:53:57:d6:1d:74:7e:d8:
c4:96:a5:4e:17:0c:bc:54:35:dd:89:b7:7d:75:f4:
68:de:0a:ac:cc:9f:7a:82:af:5e:95:0c:0a:ed:fb:
07:91:af:89:18:11:a1:3d:c5:6a:fb:db:cd:1c:1c:
3d:37:d5:0f:2d:80:b1:a2:10:0e:10:0e:49:89:16:
31:1d:80:1a:d5:ef:b6:4a:b8:a2:7e:41:15:1b:c6:
8d:04:c0:cd:7e:e8:19:7b:ef:d1:ad:13:5f:03:b7:
8d:ff:b8:cf:75:09:79:af:f7:44:c2:72:fd:d3:fc:
94:00:79:b3:0d:1a:7a:91:fc:9b:e0:37:fb:40:05:
9f:53:ea:cd:7b:22:c1:dd:32:11:3f:c9:7e:36:ff:
be:1e:df:90:12:96:c4:0b:57:eb:51:9a:1c:5e:d8:
b9:f5:fc:95:c5:f4:d7:74:ed:7e:eb:d6:e2:78:81:
9c:f0:91:f2:84:9d:df:fe:b3:f7:6e:e2:c3:02:0e:
47:85:a6:77:ee:69:2a:cc:96:be:d0:12:c8:1d:3d:
b4:ae:c0:1b:e2:5a:9e:a4:82:10:22:9a:5f:a1:5e:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.220.0/22
IPv6:
2a09:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
1e:08:82:28:cf:d4:1b:8b:3b:f1:69:dd:28:5c:58:bd:31:2c:
4a:67:1a:71:8f:8c:41:11:d7:e7:2a:34:8e:c2:3e:94:e0:2f:
60:59:95:c0:71:67:4a:3f:c4:49:a6:3d:62:1d:50:70:88:3e:
02:57:3d:cb:8c:91:a5:e1:5d:48:8c:1d:f0:56:39:9b:9d:66:
2a:51:74:f3:c5:27:b8:e0:6c:9e:9b:87:49:2f:f8:95:9a:76:
c2:42:e4:44:c0:d2:18:01:3d:83:ec:ec:81:a8:4a:8b:e1:62:
a3:ce:15:2e:94:85:cf:65:d8:03:4f:04:96:12:15:25:6f:8b:
0d:08:9b:e1:0d:48:56:2b:f4:61:63:b9:75:f5:de:f5:13:d1:
e0:a5:c0:81:3e:c3:ca:9c:f1:17:44:2a:45:d9:16:5d:02:1e:
e5:6e:3f:94:51:05:d7:76:9d:8a:fd:b5:f6:26:fd:3c:47:b9:
27:8d:1f:ab:9a:4c:4c:8a:ac:0c:dd:0c:72:a4:96:1c:b4:d8:
b6:11:aa:f5:36:f3:63:41:89:fb:92:e9:99:4f:55:50:a9:60:
5a:0e:ce:2d:c3:e2:ca:68:5c:3b:6f:91:b2:63:78:a4:86:da:
dd:32:46:87:7e:6b:c2:1a:0d:bb:fb:ae:00:73:4d:3a:27:41:
8f:ea:65:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 12:11:16 2024 by rpki-client on console-ams.rpki-client.org