Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
File: BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer (raw, json)
Hash identifier: N1Nd2pgw2GWdvs7jQg5UzOGQrVA+xQw8JXaL9boTErE=
Subject key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D37E1B7E16BEE70FD57925725A7F7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 31.6.0.0/18
IP: 178.208.160.0/19
IP: 185.29.164.0/22
IP: 185.150.136.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:37:e1:b7:e1:6b:ee:70:fd:57:92:57:25:a7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:46:8d:42:10:d4:18:ad:02:86:ba:66:6b:
99:3b:0e:0b:1a:f7:58:2e:03:2e:83:68:bf:8e:35:
d3:dc:77:5f:98:9c:e5:4f:7d:7d:df:f5:d2:24:a3:
d0:37:ae:78:ee:8d:86:05:e5:7f:95:8b:0c:c2:5a:
51:ce:06:08:0d:8f:4e:e5:d2:2c:7b:66:d2:da:79:
56:1c:12:ff:0a:d9:a6:33:a5:52:d1:20:4f:19:91:
59:26:1f:25:78:a4:8c:d7:43:ce:3b:cc:c4:51:3c:
ea:a8:52:36:e9:a4:4a:9e:0a:c6:c8:b7:92:88:8c:
a9:7e:f0:08:18:d7:c7:e5:32:b5:31:09:79:18:bf:
1b:85:80:5a:54:75:05:ed:ac:a4:a2:d0:a2:63:02:
ff:49:87:34:b8:b6:fb:e9:ff:e3:52:08:10:77:95:
c8:6a:c4:2c:40:47:66:e9:d2:81:7b:a8:d9:81:e5:
6d:a2:5c:b7:f4:36:a3:ff:4f:40:62:86:a3:8b:81:
d1:e3:ab:59:e5:6e:98:38:bb:eb:32:de:c0:d2:ef:
53:7b:50:3d:b0:52:e4:e3:78:bd:30:74:7a:a0:24:
36:d3:93:46:43:6b:6d:0c:17:7c:8d:45:b7:14:d1:
a8:d1:46:5a:8c:db:bc:87:5d:4c:a3:ee:51:11:f2:
0d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.0.0/18
178.208.160.0/19
185.29.164.0/22
185.150.136.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:a6:40:5c:0e:c6:f0:04:13:44:b1:fa:02:e9:92:5c:ab:16:
6f:e1:db:83:50:4d:17:16:7f:8a:48:d2:93:65:4a:95:59:f5:
f0:7d:40:d4:1f:ab:e3:4b:ba:8f:07:25:80:06:15:8b:16:ae:
20:b7:79:34:11:1c:e6:61:b9:d6:6a:b1:fe:aa:1a:a9:19:41:
ec:eb:e9:bb:e1:37:9a:42:84:c6:b8:ef:72:e6:c3:a8:ce:aa:
a4:b4:8a:e3:2c:23:58:b4:b7:48:33:cf:c4:90:f6:05:a7:49:
1c:a4:03:25:65:d1:a2:68:1f:a4:88:f7:aa:eb:af:79:f2:01:
ac:c3:53:2f:1e:98:ff:cc:24:fb:90:3a:9c:a3:cf:26:bf:29:
62:a1:1b:fd:ec:95:bd:ee:73:06:f9:06:f4:99:d5:20:32:1d:
d8:cd:58:6a:ba:73:75:e0:3d:71:5f:27:b3:f7:09:cf:4b:1c:
72:21:d2:7a:d8:40:01:60:2b:f2:d0:3a:de:8e:ef:a3:a5:2e:
ac:45:1b:b3:6e:38:ca:3d:d4:93:f3:80:a3:ce:30:db:fa:b9:
fb:fd:b1:90:ae:aa:8d:b2:4d:9a:77:e6:a1:ae:f2:80:79:9a:
a3:c0:68:67:ba:7c:ba:e9:43:dd:ed:54:05:db:dd:cc:a1:47:
48:87:66:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:22:49 2024 by rpki-client on console-ams.rpki-client.org