Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
File: GdZfozzls_e9tJfl_KUJ1_wDxpM.cer (raw, json)
Hash identifier: r7a2QrH5Dcx+koANVhxbNTRB90pmGKckZ9jvv6Ml3ys=
Subject key identifier: 19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801CBF2EAE30710485886A9214CDD61
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.103.232.0/22
IP: 2a06:3300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:cb:f2:ea:e3:07:10:48:58:86:a9:21:4c:dd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:d9:48:6b:5a:27:06:6e:b4:78:7d:70:76:
a7:1a:a3:56:67:3a:d6:b0:f6:0f:92:af:2d:8a:b5:
e3:8a:ba:98:07:00:f1:c7:38:d1:ac:82:96:a2:2a:
f6:1d:bb:70:34:f7:fe:cc:d5:77:67:9e:f5:38:66:
f8:fd:38:e2:de:8c:74:c4:1b:4b:68:a3:fc:0b:72:
57:2f:6f:49:f3:48:d1:29:09:c5:8b:79:c9:72:f8:
e7:36:a5:ad:a4:da:a6:0d:e7:66:2e:af:ca:62:ba:
85:49:9f:31:aa:1f:c6:80:33:de:51:7d:17:2d:9c:
0d:20:b0:c3:a2:38:30:51:08:b0:78:03:0b:f4:fa:
4f:cc:4b:db:c7:06:76:3f:08:18:5c:d4:b9:e5:91:
06:3e:fb:47:30:b1:25:53:26:f3:3c:e6:03:47:b1:
d7:31:56:8d:be:bb:7f:e1:f2:e0:46:0b:31:2a:c0:
f0:f0:1e:27:5d:c5:9c:f3:f6:c0:29:7f:96:c8:37:
04:be:b7:0a:02:b8:f3:27:82:8b:b2:f9:b0:25:d6:
01:0b:d7:7a:4a:6e:65:e9:c4:50:57:92:c5:9d:aa:
a8:74:78:e9:01:7c:15:8d:c3:38:aa:f5:57:40:41:
9c:84:47:ec:f4:78:21:3a:31:91:e1:d8:f8:5f:36:
5e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.232.0/22
IPv6:
2a06:3300::/29
Signature Algorithm: sha256WithRSAEncryption
11:66:0b:a4:5b:2f:11:af:11:b3:00:80:aa:88:e3:08:ac:89:
48:e8:81:72:d8:ec:b0:3a:81:04:5b:c2:e4:d0:a0:ad:2f:b5:
56:c1:e9:a2:55:b5:ed:d2:62:9f:f7:df:a5:10:0f:a8:32:56:
f6:65:ac:c4:d5:fa:bb:17:ec:f8:9c:e7:41:3b:a2:8e:b8:7d:
4b:a2:93:e1:66:17:92:b8:b3:0a:72:d5:14:35:10:91:8b:62:
5d:7c:d2:20:0a:e8:83:dc:e8:6e:3b:55:3d:50:48:ff:04:3a:
94:c8:0c:64:9b:61:b6:37:b9:b9:96:cf:1a:eb:53:36:99:99:
24:73:b2:27:30:d1:aa:84:93:e3:17:5d:12:11:cd:86:b0:50:
ca:4e:38:4f:fb:53:87:27:89:66:e8:77:81:8a:84:98:d4:cc:
13:5f:4b:a4:bd:8e:d5:8c:ef:0d:fe:c0:c2:dc:7c:cb:2b:a1:
4c:13:d0:77:27:07:90:18:c9:8f:53:c6:63:f9:27:21:74:29:
04:9b:ad:5e:c8:1c:a5:87:a4:23:69:8f:54:6f:e3:4c:b9:a7:
40:1b:b0:de:53:ba:68:84:1c:a8:5e:b3:5b:22:03:b3:fd:66:
94:7e:a1:40:99:06:af:fb:8e:be:25:44:23:ed:72:e1:f9:db:
16:f5:52:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:55:31 2024 by rpki-client on console-ams.rpki-client.org