Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
File: F3m5XYpY_MpqgS53fn72lFP4rJg.cer (raw, json)
Hash identifier: w5SWPxBgUwevfSPwgm6RuNE6jMPfcq2X6mbSlPik38c=
Subject key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E5B8CFF75CBC8D2FA8E058ABF88B95516
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 20 Mar 2024 11:09:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.184.212.0/22
IP: 212.78.96.0/21
IP: 212.78.109.0 -- 212.78.111.255
IP: 2a00:1d08::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5b:8c:ff:75:cb:c8:d2:fa:8e:05:8a:bf:88:b9:55:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 20 11:09:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:28:28:28:db:0e:88:83:f1:e0:f9:c0:88:
da:f7:f6:38:86:a1:b0:3b:48:b7:8c:aa:d0:9f:8f:
44:19:28:37:2d:8b:f9:62:13:6f:73:46:65:3e:4f:
d5:64:18:cf:09:65:0d:e9:dd:99:2c:48:1a:94:a0:
7a:69:39:79:a3:14:86:1b:e0:b8:df:47:1e:60:b3:
24:95:d7:21:34:5c:8c:a1:b2:7c:c7:42:41:4a:7c:
f9:9c:5e:4e:67:7a:d4:13:a8:07:b5:a9:40:0e:e2:
72:44:92:97:d0:7a:a1:76:98:a9:9b:75:89:91:fa:
53:6d:01:83:fb:c3:2c:f9:ef:06:53:22:80:ff:21:
7b:c2:a1:62:2e:30:a6:3a:3d:6d:61:44:52:04:93:
de:e7:57:4f:b8:70:e8:2d:3a:2c:72:64:b4:fb:1e:
22:5c:73:a6:df:ac:2e:8b:ab:07:16:e3:78:3f:3f:
52:56:40:3a:05:9e:4d:46:01:b7:4c:46:3b:29:ea:
60:b4:ca:24:15:a8:92:7a:04:52:cf:7f:67:da:8e:
10:68:ef:92:dc:ce:aa:70:7c:4d:fc:5c:5a:ed:8b:
10:dd:40:8f:0b:21:a6:0a:7c:0f:0d:25:b6:74:74:
52:b8:45:73:ae:d3:d6:3f:52:ff:0e:4b:92:d6:c8:
ca:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.212.0/22
212.78.96.0/21
212.78.109.0-212.78.111.255
IPv6:
2a00:1d08::/32
Signature Algorithm: sha256WithRSAEncryption
4e:26:b2:f0:e5:aa:7c:59:77:31:c2:37:9c:35:09:8a:1e:d0:
1d:3e:68:52:a0:77:36:7b:f2:de:35:b1:82:ee:90:22:7f:63:
2b:89:d3:8c:11:75:dd:fe:a2:71:d4:31:84:6b:a8:e6:95:ed:
7f:ef:99:4a:7a:8f:04:9e:0e:57:fc:03:b5:dc:e5:48:df:71:
01:13:79:47:bb:2b:48:6f:ea:1f:35:39:12:59:94:74:28:7c:
b6:5f:9b:90:de:57:c4:a8:24:25:90:5e:94:8b:55:13:d9:c0:
f6:bb:64:e4:15:7f:c2:95:2f:d1:0b:1c:69:31:87:49:35:dc:
eb:f8:62:d1:3a:3c:6a:43:fd:c0:7d:8c:47:95:3a:a4:06:d3:
aa:d2:c7:80:a1:c6:9d:0b:2b:c4:b3:53:da:c2:96:23:a5:b1:
cf:21:d6:73:65:bb:33:ed:22:c8:14:c5:13:2a:f7:3e:5a:71:
cf:14:18:aa:8d:15:95:c2:a5:0c:bc:d6:d7:4b:a5:b6:95:83:
58:11:63:54:b2:97:c7:bf:0e:ed:ef:44:90:9a:dc:9c:05:fe:
f9:f1:eb:e3:e7:05:b7:79:32:34:3c:a6:b3:b7:bd:b7:4d:9d:
70:c2:cf:d9:33:16:7b:5b:4c:8c:2a:d3:6e:94:1d:83:2e:f4:
19:28:75:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 25 23:21:04 2024 by rpki-client on console-fra.rpki-client.org