Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
File: CovKGg6GRItz2lTELLDXV2U3Pyc.cer (raw, json)
Hash identifier: SsT3vVCWdF535NuHg6meJM8amODxxnP+gZEy30XcvYw=
Subject key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE426332E3AC8C00FB07BE61C4DC34
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:30:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 37.35.112.0/21
IP: 46.255.168.0/21
IP: 77.239.32.0/19
IP: 185.74.112.0/22
IP: 2a00:d420::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:42:63:32:e3:ac:8c:00:fb:07:be:61:c4:dc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:70:a5:a5:ce:6e:0a:e6:fa:e6:71:d8:13:d6:
7c:50:56:47:5e:6b:17:8f:43:89:66:ed:f1:7d:04:
a2:39:25:73:09:4d:34:dc:55:eb:6f:19:a9:34:b3:
29:08:78:00:02:4f:4b:a5:3d:27:7c:c4:70:5d:7b:
94:9e:51:d2:11:b6:aa:ae:23:b6:37:aa:67:b0:94:
97:01:46:93:05:88:2c:bc:79:d8:5e:17:78:16:1b:
b2:79:2f:c9:92:20:28:1a:68:bb:36:93:fe:84:d3:
d4:eb:66:60:d0:e2:7f:95:02:af:59:35:e4:f2:38:
cc:fe:1d:54:10:17:9c:f2:7a:e0:21:04:8d:f9:89:
20:b9:21:23:68:4c:5f:2c:c1:61:41:7c:db:23:5b:
13:4b:ae:31:7f:36:4d:4e:b4:41:ea:81:65:a0:fe:
d5:c2:d0:db:71:71:2f:50:f0:e5:5c:f2:48:44:e9:
80:d3:82:94:db:b5:09:87:dc:47:29:b7:53:63:28:
6e:2c:2a:f4:c3:c6:86:da:cf:d2:db:6b:92:19:18:
09:29:61:d2:44:82:52:ab:1a:2c:24:6b:9e:0d:3f:
16:01:a7:99:4d:1f:e1:47:1d:da:12:a6:86:28:68:
17:d5:d3:7d:a4:3a:2b:a9:65:af:37:10:57:25:8c:
7a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.112.0/21
46.255.168.0/21
77.239.32.0/19
185.74.112.0/22
IPv6:
2a00:d420::/29
Signature Algorithm: sha256WithRSAEncryption
9c:e6:93:d7:19:d2:1c:f9:d3:43:42:a6:b7:2a:c0:6e:f5:1d:
d3:d8:00:81:41:20:4a:93:84:2b:c6:a2:23:d6:e0:ac:3b:44:
e6:cd:64:23:1f:8d:e3:f6:de:e2:7d:f2:ed:3b:a7:72:2e:f3:
8f:d2:60:03:f9:53:3d:8a:98:77:b3:5f:e2:e9:09:7d:48:ef:
68:99:ad:70:c9:e1:e2:bd:1e:6b:db:b3:ed:b6:a8:43:af:84:
e5:9d:31:69:c2:32:6e:51:c3:61:e8:70:84:87:ad:9c:49:08:
4d:a4:9b:ea:73:1a:c0:7c:b6:c9:bc:c5:78:b4:b6:2c:d8:8a:
2f:62:33:ab:ca:8b:66:cb:f8:ef:fd:00:e0:82:ce:48:f8:f5:
9e:d5:dc:22:87:f5:2e:13:90:43:1d:38:55:a8:55:85:3b:ac:
8c:58:66:2a:4d:4d:07:09:ea:cb:bb:2b:38:7d:5b:bd:e1:b5:
b4:ad:29:51:c4:4a:8d:60:19:a4:95:35:66:b3:97:55:0b:64:
21:70:20:56:85:16:f8:b0:52:d1:14:72:f3:d2:e6:3a:13:7d:
72:8c:76:0f:7a:e4:38:eb:09:57:cc:01:85:44:96:f8:2c:62:
88:b9:ab:94:d7:0b:7b:41:a5:50:cd:2e:41:1b:b9:89:e3:a8:
d4:cb:94:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:55:23 2024 by rpki-client on console-ams.rpki-client.org