Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
File: GRqWooxl1YTI3SNNPbREz0sze6I.cer (raw, json)
Hash identifier: BE4FZogR3KsP2uZYfkDvKo1UzO9PHOcivEkc5YxAxJk=
Subject key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC501266133DA3831710B3D5888AE9D69
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 46.31.232.0/21
IP: 185.165.52.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:26:61:33:da:38:31:71:0b:3d:58:88:ae:9d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:37:31:0a:13:d8:52:e2:72:c7:13:c7:e3:b8:
64:c3:92:65:8d:6e:21:23:9a:c4:10:9c:27:c8:f6:
94:40:30:71:e4:95:4e:cf:48:90:c3:e1:a4:0d:65:
8b:8f:ab:e8:f3:c2:5f:db:6a:de:b6:d5:7a:2d:af:
6b:82:5e:92:17:6e:c5:1e:30:ca:28:e1:57:08:94:
e7:e0:c7:8b:fe:17:10:77:fc:99:ac:32:61:b4:d0:
0e:30:43:93:fd:10:7a:1c:ad:75:af:4a:bf:b2:64:
74:9d:a0:72:c6:33:34:b4:5c:0f:e7:1b:85:97:f7:
80:4c:5b:85:cd:75:70:51:9c:e1:88:15:a4:97:2f:
af:84:89:86:cb:56:2b:cd:75:ab:53:09:b0:03:f4:
fd:7e:8b:50:de:e5:29:80:52:f0:1d:f9:7d:53:73:
80:d3:95:69:a4:ff:eb:a7:ce:58:fa:35:36:98:ba:
7b:a8:a7:92:34:d0:6f:f1:d7:fa:61:b8:d5:3a:6c:
a5:ac:29:c7:09:a9:63:0c:52:92:6b:62:6c:1f:17:
cb:97:45:12:76:9f:5d:70:24:1a:07:82:18:35:0a:
f0:c1:6e:ea:96:4c:45:03:2e:c9:d6:ad:35:1a:2b:
1e:57:68:42:a5:1e:27:f3:65:f3:74:4f:e6:1f:1f:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.232.0/21
185.165.52.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:a2:64:2d:28:0e:3e:83:c2:e2:bf:06:81:2d:b5:9b:e3:d8:
7e:87:46:53:39:d6:8f:78:50:af:8f:57:68:b1:57:3b:d4:eb:
34:c5:2c:8e:89:4f:69:26:90:ec:74:f4:80:ff:4d:e7:c2:95:
cb:2a:10:2d:e4:94:2b:2b:f8:ba:8f:5e:db:a2:4e:29:0c:13:
27:ea:0d:b0:07:51:4e:6a:13:3c:2f:45:77:3b:cd:33:e1:1a:
aa:08:02:b8:32:2b:88:63:c4:d4:dc:7f:99:ae:e7:e0:93:91:
2d:a9:7b:95:d5:94:53:d3:c6:73:79:d8:a1:b4:df:29:f8:32:
86:c1:08:9a:ef:f1:18:ea:36:e5:63:ba:f9:36:e7:b1:ba:3a:
d7:99:c0:11:e6:5b:9c:04:b0:59:70:b7:59:9d:12:86:22:3c:
ad:d9:d9:e7:aa:ee:4a:d4:9c:c3:0b:ad:23:be:c3:7f:6a:ce:
9b:3e:fb:94:f0:27:33:66:42:65:0d:e6:b9:31:b3:f8:0e:24:
37:a4:a0:73:0b:37:bd:ee:00:bf:68:8f:d8:81:98:33:61:79:
dc:68:fa:fd:ab:12:12:59:7d:08:5b:e8:78:a4:8a:0e:6e:c0:
18:ce:fe:78:06:78:07:18:27:80:a2:67:83:03:62:5f:b6:df:
3b:b0:bc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:10:01 2024 by rpki-client on console-ams.rpki-client.org