Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
File: CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer (raw, json)
Hash identifier: NJxxegwUJpmmCAdM+9ny0aBymOw18MPL2RHlFkq+7UY=
Subject key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500AA83F9C26AA2B4AAF5DE00CC3517
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 95.161.140.0/22
IP: 185.213.212.0/22
IP: 2a0b:8fc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:aa:83:f9:c2:6a:a2:b4:aa:f5:de:00:cc:35:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:96:62:94:28:8a:10:ee:b6:9a:47:99:6f:
3e:7f:83:d5:38:01:32:7d:58:c0:eb:d8:b2:7e:35:
4f:df:0c:7c:73:8f:36:2d:47:88:5d:8e:64:af:85:
c0:db:53:40:d7:ec:eb:8b:b5:e1:30:a4:a6:72:09:
18:f0:55:eb:c4:41:ec:15:41:37:9d:ce:6d:43:24:
9c:9d:f2:ab:4f:9d:6e:28:da:0d:df:f8:e2:2c:9c:
19:00:a8:74:cf:6e:8d:de:3c:77:bd:fa:60:18:3c:
20:c2:03:2f:b0:57:dd:cc:a3:cc:a2:21:d3:27:ea:
ed:f3:d7:30:88:ea:b0:b7:1a:9c:e1:8f:cb:26:f9:
f4:a1:9c:d1:e6:62:a2:23:8d:c2:23:11:28:f9:01:
fd:8e:2d:4e:68:b8:4c:ab:4b:8b:03:23:42:73:7b:
7d:8f:78:45:15:54:2a:3b:f8:1d:e3:eb:8d:54:bd:
b2:ac:74:b7:3e:95:c9:98:2a:98:19:47:6d:89:1b:
6d:af:e3:bc:f6:d1:33:d4:0e:d9:b7:6d:e4:ea:99:
47:75:e8:8b:72:4b:dd:31:26:65:f8:ea:b0:48:bc:
30:c3:23:d9:9d:36:a4:ec:46:46:dc:96:c2:e5:43:
41:ca:08:e3:f6:dd:98:89:87:1c:91:7a:99:bd:29:
98:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.161.140.0/22
185.213.212.0/22
IPv6:
2a0b:8fc0::/29
Signature Algorithm: sha256WithRSAEncryption
6c:17:88:de:56:06:65:01:4b:0a:b2:a3:c9:9b:31:03:5e:05:
7c:70:34:45:c2:a4:11:e0:75:bf:db:20:90:e9:f7:22:a8:5b:
75:9a:4c:dd:88:1e:d7:b4:9d:84:83:5f:7b:e7:c6:52:9a:d5:
dc:cc:73:d8:48:49:a0:d2:c8:0a:3e:b5:bb:ee:46:9d:b2:8c:
62:89:0a:6f:cd:76:3a:1d:11:31:c8:2f:c3:0b:19:a9:ef:60:
f8:22:62:5b:89:be:f2:31:97:e9:fb:b8:1c:bb:4c:de:cf:89:
b9:f3:5a:78:db:bd:b3:57:6b:b4:3b:8d:68:64:e1:1a:0e:48:
52:37:db:0d:40:1a:1c:31:f3:9b:42:7a:d3:62:b2:9d:f8:2b:
56:f3:f2:68:43:87:b3:9b:1e:82:93:47:94:85:ca:5f:cd:06:
8e:10:b5:3a:15:f9:03:cb:1e:13:6e:19:e2:bd:3e:30:ea:32:
8a:71:19:e9:7a:a4:74:64:4a:46:3a:f6:44:2d:ba:da:fc:80:
17:8e:8c:62:c4:68:42:a6:52:ef:86:66:e8:d3:75:8e:06:ba:
c9:e2:91:c9:a4:6c:48:72:63:18:f9:54:7d:23:83:a8:83:4b:
6e:7e:ac:ff:a7:a1:26:53:bb:69:2e:bb:cf:bb:a2:23:1d:34:
2f:ad:68:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:52:48 2024 by rpki-client on console-ams.rpki-client.org