Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
File: GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer (raw, json)
Hash identifier: Aqjd5LMZ18ca38LjBLAyuq8b4te2fWMnyxc63O/eYc4=
Subject key identifier: 18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBE440B0F87A66C95D1C082A61A14D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 84.39.136.0/21
IP: 185.69.128.0/22
IP: 185.146.68.0/22
IP: 203.190.56.0/21
IP: 2a05:2200::/29
IP: 2a07:4e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e4:40:b0:f8:7a:66:c9:5d:1c:08:2a:61:a1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:f7:71:49:fb:3d:d1:4e:9b:f4:29:d3:58:
65:eb:7d:9d:51:59:dd:e4:12:14:74:a8:47:96:8c:
c9:46:8a:d9:33:3b:87:64:bd:e5:36:05:b1:7e:4b:
6c:7a:a1:1c:c1:e4:f2:31:33:5e:9f:6c:ca:a4:8c:
79:d7:0e:b9:62:5c:75:80:b4:23:2a:92:f5:5e:6e:
5a:40:a5:60:54:b8:57:02:ce:54:48:51:2b:e7:bd:
c8:b4:d2:6f:5a:04:19:41:77:db:b1:07:b8:dd:98:
af:fa:aa:81:56:f8:39:a1:09:fb:69:e1:72:00:7d:
be:de:12:37:60:8c:86:95:5a:49:01:51:a5:ce:a4:
0a:f6:d6:24:a5:3f:9c:0d:a5:c1:96:9c:4c:1a:cd:
a6:01:5c:e7:3a:14:5e:33:b3:18:35:c1:cd:66:df:
92:f6:c5:1f:97:a6:25:2c:af:f2:41:66:07:53:37:
82:01:09:b7:9c:b2:c9:4b:3e:c7:dd:a1:1f:83:8d:
ae:23:d4:b7:13:c2:00:eb:d7:e4:38:4f:3f:61:99:
a8:bc:a5:6e:a4:1a:dd:cf:89:d9:10:d5:e0:b3:40:
bd:71:50:d2:8c:15:1b:3c:67:d2:ff:c3:69:5a:ae:
52:6b:78:3d:c1:fd:89:3d:d4:22:fc:8f:13:3a:49:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.39.136.0/21
185.69.128.0/22
185.146.68.0/22
203.190.56.0/21
IPv6:
2a05:2200::/29
2a07:4e40::/29
Signature Algorithm: sha256WithRSAEncryption
5a:4e:d0:b5:da:a6:19:e4:df:a9:c4:45:89:57:df:a9:4f:63:
15:5b:e8:8d:55:48:74:b9:99:7c:b4:a8:b2:a0:fe:31:0e:56:
65:ef:fb:91:c8:81:ab:53:06:c2:92:ef:01:82:e7:47:27:62:
86:1d:5d:ed:e1:af:2b:ad:e6:e3:5c:04:b8:d2:87:38:cf:74:
7d:3d:65:c8:51:a8:39:23:c9:73:2f:c2:9c:3e:66:16:32:79:
e8:0e:7c:44:2a:34:4f:5e:ca:e7:35:b0:88:39:39:87:64:4f:
a2:26:d4:d4:4f:e2:35:a2:c0:b1:73:dd:5d:78:88:cf:93:66:
20:be:4b:9b:ea:74:a1:38:91:3b:28:c6:a5:d0:a8:64:fc:f9:
10:aa:be:59:44:c9:5f:40:b7:d5:d7:e8:16:44:e6:d7:29:fd:
f7:78:27:eb:89:4c:cf:0a:43:68:d0:65:76:41:6f:a3:ea:99:
a1:b7:61:1e:68:4d:25:b0:e9:6e:92:ce:7b:9d:f3:88:4a:1a:
98:cb:5a:6e:79:7a:6a:3d:93:f6:c2:e8:d4:4d:b9:2f:49:32:
02:71:71:b5:25:c9:5d:14:d1:87:5a:fa:42:32:3f:43:a4:66:
b6:cd:c4:da:e2:3f:ec:d3:c7:ee:a6:56:d4:e3:d0:d1:83:23:
a6:04:15:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:55:15 2024 by rpki-client on console-ams.rpki-client.org