Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
File: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer (raw, json)
Hash identifier: PXTJX32K4GDoZEoijhvkqUGE7fiJL7RLSp35U+Ec9ks=
Subject key identifier: 1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3491E3401997E869AE4D3C75485E000
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.85.168.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 13:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:1e:34:01:99:7e:86:9a:e4:d3:c7:54:85:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b1:44:05:b4:eb:13:71:ec:c1:c4:09:88:2a:
c6:bf:95:58:c6:41:80:86:4c:3b:99:81:1d:0e:3d:
83:16:39:54:28:3e:f2:f8:a8:30:bd:86:be:4e:fd:
76:1e:52:60:6d:aa:e9:6a:8d:00:39:ad:03:c2:d2:
f0:cd:09:55:1a:57:f4:39:b6:60:98:bf:ec:59:40:
c0:22:aa:e4:d8:d4:c8:27:52:9b:21:6a:66:87:23:
b2:eb:a2:9b:7f:92:ca:56:19:ec:31:20:05:ec:50:
ef:88:5b:e6:ef:53:5b:89:fe:0b:e8:21:b2:23:2f:
05:e7:28:67:e4:70:43:19:ec:ec:42:fa:05:83:6c:
a5:8f:fa:af:75:be:37:04:b4:00:a5:68:02:fb:53:
1a:7f:3c:98:df:81:d1:9f:e6:2d:ae:ce:5e:b4:0c:
bb:c4:e9:de:3a:e0:2f:94:37:a4:d4:09:2e:0a:f5:
c8:08:b4:e8:62:fd:5e:31:9e:ef:d4:71:ad:54:7d:
77:2c:ed:8e:7e:95:7d:85:b7:19:6e:dd:a3:57:8e:
72:d9:5d:50:cd:c2:c5:18:b6:58:5c:0d:9f:6c:dc:
00:7c:28:89:4b:41:d1:17:d5:32:14:d8:14:56:d5:
e0:ca:9d:48:10:44:3d:af:8f:29:f0:47:03:da:33:
68:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.168.0/22
Signature Algorithm: sha256WithRSAEncryption
85:ff:50:7f:b3:0a:f0:ab:d9:86:89:b7:5b:63:28:98:af:2c:
2d:19:6f:aa:50:b0:95:ad:a7:70:62:e3:94:30:41:48:59:96:
85:04:33:8a:23:9b:e1:40:92:fa:c3:4b:c0:ca:41:13:9c:6d:
ae:7f:60:30:69:06:ae:c8:13:98:a8:06:fb:b6:57:9a:4a:93:
af:b1:e1:5e:36:f7:13:7f:81:bb:38:c6:86:9c:f4:25:82:9f:
75:03:ea:8f:6d:41:2e:d8:6f:68:22:42:6a:bf:a2:89:9c:82:
72:cf:4a:62:31:bc:b6:42:99:e8:8c:08:26:da:ad:0b:2a:3a:
40:79:61:f4:9c:96:ec:b5:ae:15:4f:ca:5c:06:63:a1:86:63:
64:87:36:4c:17:e5:da:1b:4e:da:e2:d7:f4:a5:cc:3b:81:c4:
d3:75:51:94:9a:06:f3:46:0e:59:da:f9:05:dc:22:f3:b6:bb:
c5:80:3a:ec:8d:b6:53:38:4d:31:47:dd:3b:41:a7:de:d3:00:
ec:59:3c:e9:c3:66:67:78:80:0d:70:4d:f7:ef:5a:f0:9f:1c:
cc:73:3c:0e:ac:2c:69:85:d7:e8:8a:6b:c8:d6:78:bc:e9:b2:
e8:f6:b8:23:b6:b8:d3:01:38:41:54:51:16:71:d1:b2:b4:99:
97:2e:be:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:52:57 2024 by rpki-client on console-ams.rpki-client.org