Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
File: FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer (raw, json)
Hash identifier: PrMmWVfKP7c0tQ9ATActJIlfBT9j3pTdhHR/PMtOwyM=
Subject key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3491CC4B0AF2CCBE3A15939691AE674
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 83.219.112.0/20
IP: 185.74.140.0/22
IP: 2a00:d2e0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:1c:c4:b0:af:2c:cb:e3:a1:59:39:69:1a:e6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1492a20754c9a7650b8279b9390689c469d73595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:01:57:54:2a:9f:b0:9f:e0:5b:5b:bb:39:98:
58:78:bc:e0:c0:10:81:23:cb:ca:67:76:07:04:22:
81:78:ef:93:f4:67:12:e0:80:b3:5f:44:32:db:cd:
3d:58:3b:af:3d:b3:8c:68:ea:ac:fa:39:78:3e:ed:
88:3e:d8:21:a1:fb:c7:b4:b7:ce:0f:34:e4:aa:06:
71:9b:cb:01:48:b0:a8:94:12:03:d3:35:bc:2a:ba:
13:9f:15:eb:7b:8c:6f:88:1c:18:8b:90:26:8a:16:
87:a5:89:0c:f2:0b:7c:9d:e0:0e:38:ee:dc:2b:f8:
33:c0:1d:2f:1a:5a:84:03:20:b4:dd:7f:91:70:6c:
38:fc:29:76:f0:a3:3c:2a:c5:5d:0d:bd:1e:07:4f:
ce:08:0a:1f:c2:56:36:6f:e3:19:b6:ef:11:1b:15:
31:21:53:2a:a1:1e:96:ac:bc:b8:8b:89:97:0f:5a:
96:d9:9e:f1:47:f1:2c:2b:6c:d5:23:bd:c5:14:96:
74:97:72:48:5e:90:b0:f9:1a:d4:02:50:fb:f7:81:
9d:18:88:fb:89:ac:2b:29:7b:f2:19:3c:0b:24:01:
da:91:a4:fa:b6:62:cb:7c:1b:f5:90:f8:84:9f:ba:
88:25:50:87:ce:c1:e9:86:51:4e:4d:5e:0b:6e:61:
8f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.112.0/20
185.74.140.0/22
IPv6:
2a00:d2e0::/29
Signature Algorithm: sha256WithRSAEncryption
62:39:dd:91:0a:81:7a:83:27:8b:e8:f3:00:f8:29:44:1a:a8:
9d:d9:a1:66:f0:78:83:3d:03:11:33:ae:fa:a1:87:31:41:65:
a2:5d:be:b7:ba:76:53:72:31:c9:34:71:86:3d:ce:4a:9f:77:
f0:17:d2:0e:c3:fc:a7:20:5a:54:5f:d8:c5:9a:bb:87:71:2a:
56:fd:65:05:cf:f1:ec:28:01:6e:ec:20:a1:d8:65:43:4e:ac:
d6:79:8a:f7:82:0f:50:aa:94:2a:51:d2:d0:fd:40:f9:66:af:
cc:59:da:15:b4:7c:64:88:71:9b:da:f6:53:ff:3d:0a:36:c8:
c9:66:04:53:77:36:32:59:92:38:df:0c:87:d5:73:7a:67:7b:
b7:5c:a9:ee:11:70:24:6c:d3:e0:8a:2b:4c:15:95:dc:83:8a:
11:5c:e8:7b:16:ce:36:d0:49:65:2a:24:16:e2:7c:47:54:ab:
f4:46:2b:62:44:e9:56:7e:88:2b:6d:66:0f:ef:78:b2:1a:e8:
71:d1:19:b1:f2:05:0b:19:dc:cb:4d:5d:70:39:97:87:e5:54:
e0:85:db:6e:09:9d:fa:26:6f:e6:d2:bf:47:8e:b1:cd:17:17:
0a:93:2e:5f:70:f7:c9:b8:cc:b8:2a:02:6c:51:b3:0e:0f:44:
53:9b:bf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:08:32 2024 by rpki-client on console-fra.rpki-client.org