Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
File: GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer (raw, json)
Hash identifier: xUsT4eES9sIcOGsUGtjcM7N5Dqw9sD9CxB6iGzkN5sk=
Subject key identifier: 19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB167CFA4CD58234AFC27E791665F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.223.164.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Dec 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:16:7c:fa:4c:d5:82:34:af:c2:7e:79:16:65:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19337ca56de7c3b977875369ecde53852515746f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ba:d1:c0:d5:75:16:eb:ab:7b:4a:98:10:5f:
d1:de:ff:49:2f:11:96:7a:b9:0a:46:3a:43:4f:f9:
60:a5:22:ff:40:5d:b1:13:6a:04:ed:16:c4:27:54:
f2:d6:90:dc:5f:4a:66:44:1d:2e:38:77:4e:91:06:
f8:9e:62:a2:92:b3:cd:f1:a4:b3:0d:87:92:7b:69:
9d:55:f3:9a:f0:31:f0:55:85:db:d1:00:50:6b:24:
24:7e:01:1d:be:fd:dd:06:bc:ed:d8:fb:07:e2:57:
a1:ef:06:0c:fe:21:a0:e3:78:2e:bc:fc:2d:7e:7f:
39:75:48:e3:b5:b2:1d:28:b8:c9:d2:b0:d1:35:c9:
c3:99:3f:4a:fc:e3:dd:4c:5c:0e:16:90:ec:49:da:
d1:ad:d2:c5:2c:14:c0:50:82:75:8e:34:72:11:17:
bb:c5:e4:22:d4:83:c1:e6:e8:77:6e:df:66:ec:e8:
81:f9:c4:96:0f:7e:7c:c0:e7:cc:10:a5:0a:4e:b8:
da:a1:39:3e:58:85:e0:47:c8:95:96:18:4a:03:a4:
0b:95:88:b0:12:34:9f:cc:e7:c9:0c:76:8a:51:22:
5f:44:6e:3a:7e:3e:59:01:62:be:77:7b:d5:df:11:
a4:4b:14:dd:3a:8a:53:61:be:f6:b7:03:86:6b:b2:
fd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.164.0/24
Signature Algorithm: sha256WithRSAEncryption
77:dd:94:70:82:e8:35:c8:5d:42:36:88:0e:81:3a:67:21:cc:
1b:bb:4e:2f:51:1f:b6:c0:f3:35:ca:12:2a:b1:d5:38:99:f5:
f2:99:3d:b7:c9:d0:e8:f3:ab:f1:34:ea:47:be:04:a8:19:be:
88:41:d7:98:9c:e0:97:88:0f:31:c5:19:30:93:22:c9:2c:fa:
28:e8:50:fd:ca:f5:b2:c4:77:89:24:0c:6b:d9:30:72:73:39:
d2:0f:c8:6b:35:81:a1:83:4d:53:16:dc:57:52:f2:dd:24:0d:
f4:85:05:a3:ee:f7:2e:d4:c1:6b:be:cc:ae:cb:be:c9:5a:13:
4b:b1:41:0e:ca:eb:7d:a7:b6:16:0c:40:ad:c0:5c:45:e2:2d:
b8:31:0b:72:8c:1e:b8:d7:c6:02:89:be:46:cb:f7:b5:0a:96:
0f:a9:9b:53:fe:8a:1e:4c:be:a5:4c:4f:3c:8f:06:a3:56:f4:
84:79:75:a7:2b:aa:05:7a:74:1a:20:d3:66:54:84:46:55:da:
c1:27:03:55:97:f0:92:e0:ea:57:cf:87:e8:ab:0c:20:cc:e1:
40:59:2c:e7:6c:ce:a0:86:d4:55:80:8c:6e:b5:95:22:fb:9f:
3b:95:68:0d:92:1a:b8:fb:fd:65:79:b7:da:f0:eb:ed:36:ff:
85:5e:1c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 4 08:59:54 2024 by rpki-client on console-ams.rpki-client.org