Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer
File: FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer (raw, json)
Hash identifier: vWkKG7x0MWQF6vv0pvwxZHXgF+YFuVQgBcS+VORKS1I=
Subject key identifier: 16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B699BED2BDBEBF2319D839BE2E5539
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.248.180.0/22
IP: 193.186.5.0 -- 193.186.6.255
IP: 2a0d:ee80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:99:be:d2:bd:be:bf:23:19:d8:39:be:2e:55:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:0e:b0:0c:2f:31:67:ca:9c:3a:25:c8:8a:
58:30:4f:8f:06:03:9a:a2:b9:d1:5d:7e:75:55:b0:
66:de:2b:32:71:7c:88:c2:eb:0c:2b:5f:18:30:bd:
96:35:5e:e6:3b:a0:3d:d2:74:25:df:88:50:f5:39:
98:ac:c9:d6:a7:62:9f:03:7f:db:ae:63:22:e7:05:
e5:46:31:de:63:f5:49:46:89:94:36:29:4d:31:10:
7e:36:85:c2:08:81:54:0e:01:18:46:10:c9:8c:83:
6b:06:6a:74:c4:07:4c:e7:38:c1:97:68:a8:74:83:
e8:ab:2e:b1:e6:46:10:a8:b7:b2:f4:70:af:c5:9e:
af:75:19:04:3e:ff:59:93:78:df:65:7a:1d:d9:8c:
af:c4:b3:8b:87:e3:01:85:50:a4:c4:fe:ce:05:26:
f6:c6:66:ee:3d:13:a8:a8:77:1f:24:5f:32:4a:1c:
e2:db:94:26:d3:57:25:10:7e:c1:eb:31:a1:85:50:
50:3a:ff:1c:b3:1f:d3:9d:a5:77:14:d1:d5:fa:c8:
df:8c:1a:7d:80:2e:83:f8:99:68:35:ff:d7:fa:a0:
c1:f2:07:29:55:fa:1a:4b:3f:dc:69:f5:c2:4e:35:
fd:c4:9a:2f:be:e2:f5:be:a3:66:60:80:0f:5e:2e:
84:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.180.0/22
193.186.5.0-193.186.6.255
IPv6:
2a0d:ee80::/32
Signature Algorithm: sha256WithRSAEncryption
44:b0:58:3e:7b:cf:0d:31:c7:e9:0b:52:53:cc:ab:4d:83:a6:
0e:1f:ae:2d:02:58:f2:62:dd:d1:43:1f:b3:59:d4:24:08:a7:
c5:9f:12:fb:86:33:9e:d9:e0:30:7f:94:a0:53:68:63:76:54:
a0:24:3f:e2:4b:eb:d4:c6:db:8b:3b:39:1c:6f:20:07:f4:35:
0e:46:af:d6:ee:43:5e:02:5b:96:29:b2:8e:51:38:46:7b:cc:
a7:fd:35:42:5a:e0:1e:2e:21:c4:f7:8b:07:a2:0d:d0:a2:ce:
1d:4b:aa:6a:6f:f2:bf:2f:6f:97:70:46:37:f0:a0:ae:ca:9a:
46:71:e4:6c:27:b1:92:fa:0c:af:5c:1c:ee:8f:ec:00:c6:5c:
45:1d:12:a6:33:06:12:2d:e8:d5:3f:ba:8e:b4:4e:b2:03:cf:
c5:f8:ec:a8:34:25:5e:da:44:08:54:e6:38:8f:5b:ae:59:16:
9a:1d:28:03:d9:d8:5a:b6:eb:47:1f:a8:79:e5:5a:21:2e:00:
a9:29:6b:5c:6b:1d:ef:01:b4:2f:33:a7:f2:6e:15:88:06:6a:
80:d8:57:e9:a6:3d:bd:15:86:06:ae:b1:73:10:10:a6:02:df:
80:9a:6a:c1:f1:7e:ed:52:d7:d7:eb:89:8f:b7:b9:c2:bd:1b:
cc:c5:29:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 04:21:26 2024 by rpki-client on console-fra.rpki-client.org