Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
File: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer (raw, json)
Hash identifier: zRypftHIOzw9u2UOjqQOJbMuFSSL9llFRIap/gdzWZE=
Subject key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC793597E472E62B6BF5E6487A0AE4F5A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 37.143.0.0/21
IP: 46.28.40.0/21
IP: 91.208.12.0/24
IP: 2a02:2d00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:59:7e:47:2e:62:b6:bf:5e:64:87:a0:ae:4f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:20:ab:c9:07:df:6b:99:33:04:17:c6:28:3b:
eb:93:8d:8b:62:37:e8:a9:41:39:e8:92:bf:db:bf:
df:21:b5:5e:6b:d4:d7:0b:ca:2f:32:30:66:30:39:
93:ec:21:e7:36:75:8e:27:b3:8d:6f:27:37:32:90:
8d:82:63:d4:3b:4e:ca:5c:02:4e:62:59:29:e2:3a:
74:90:c0:06:e1:fa:80:63:6e:ed:e8:10:a1:24:c1:
ae:83:5d:9c:3e:38:dd:d6:9a:06:0b:ac:38:af:dd:
47:ea:36:e8:09:97:22:11:26:12:4f:93:92:af:e7:
39:9e:b1:25:bb:e5:a9:00:4a:85:30:be:f9:26:4d:
2b:81:12:57:e2:b5:ba:33:59:ff:41:b1:7f:eb:05:
4d:94:a9:05:b3:c1:96:77:d1:e8:52:48:37:83:11:
de:e7:28:85:20:43:32:81:d8:33:f4:8d:fd:15:84:
a5:79:28:d7:0e:66:36:bc:62:e7:d9:05:f0:3c:4f:
4e:a4:40:01:e7:76:c8:d4:6d:d6:4d:af:f1:db:04:
15:0f:6a:2d:ff:ea:8a:68:16:bb:02:27:fc:5c:70:
9d:16:76:d2:e7:a1:bb:cf:75:b7:13:20:14:b0:16:
02:88:08:ed:3b:cf:17:40:c3:cf:39:8e:9b:1f:f8:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.0.0/21
46.28.40.0/21
91.208.12.0/24
IPv6:
2a02:2d00::/32
Signature Algorithm: sha256WithRSAEncryption
a2:09:1c:50:df:52:14:ca:e1:2a:69:37:30:74:a3:00:55:e1:
60:eb:97:60:49:4f:2f:55:3c:20:2f:01:82:db:45:ff:35:a3:
9c:cb:c4:f7:f1:b4:35:e9:91:49:fb:95:47:a9:0c:21:d3:15:
ae:e2:b6:17:bf:88:dc:1b:ed:29:a0:ce:0c:d4:6f:84:23:ed:
46:ed:96:d5:17:85:e9:7d:66:ed:fa:77:ab:03:8f:0a:58:66:
4f:91:ec:fc:3d:ec:e5:37:90:43:e6:bf:ff:0a:28:88:f2:c9:
a1:d9:47:0c:1d:25:c2:c5:41:5c:a1:50:87:e2:6e:3a:08:e9:
d9:50:3f:11:7e:c6:73:d7:b8:de:30:69:32:64:b5:70:03:f4:
c7:4f:4f:90:71:7f:4d:85:a1:19:b6:8e:f5:9e:9a:b9:ea:ec:
88:82:3b:7f:f1:b7:61:9c:4c:91:47:af:d4:23:51:43:a0:30:
fb:bf:ab:dd:d3:19:ec:ef:fa:26:13:44:e4:49:23:7b:37:52:
c7:24:b1:34:ae:1d:a5:26:e2:c4:ee:05:e9:d6:22:55:cd:67:
68:45:37:b6:26:2a:00:b5:e0:6e:b3:33:fd:e8:d9:0e:6e:31:
76:12:81:74:e3:2a:97:8f:a2:26:7e:c3:fb:cc:3e:a1:d5:56:
29:fa:ff:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 19:53:21 2024 by rpki-client on console-fra.rpki-client.org