Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer
File: ILDaIC0sNKRzptdq8JPo3gMRuVs.cer (raw, json)
Hash identifier: F3J6lKxo7k09iB/ddC8UwvwU4ya/z+Nap+4+ZB7xl44=
Subject key identifier: 20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2BC2478CA5F36AB15A50A29EF317E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:35:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.133.72.0/22
IP: 91.199.136.0/24
IP: 94.125.192.0/21
IP: 2a02:2ba8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:c2:47:8c:a5:f3:6a:b1:5a:50:a2:9e:f3:17:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:35:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20b0da202d2c34a473a6d76af093e8de0311b95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:f9:72:ec:9a:69:1a:85:77:f0:34:77:04:
ec:5e:94:dc:86:db:7d:4b:c8:d4:ff:20:2f:14:16:
31:ae:f2:11:60:63:f9:75:49:54:eb:73:81:9d:cf:
2a:42:3e:25:d1:88:53:6f:72:5f:d3:c6:25:44:4e:
cb:a5:00:ba:db:e0:58:22:1c:e2:7e:29:f5:c1:fe:
6a:1d:ad:a6:38:53:4f:e5:cc:12:c1:71:d7:89:f5:
e6:61:f5:05:66:e7:26:b3:63:01:88:a0:d8:7e:fa:
ee:8e:e0:58:df:9c:1d:43:b9:43:c9:cf:00:ec:f9:
54:69:c0:7e:a3:92:27:af:56:44:94:27:51:7f:13:
8b:bf:79:67:9d:b0:7d:3e:45:4f:da:eb:c0:f2:36:
f0:ee:c7:53:96:41:5d:cf:83:be:2d:48:2e:c6:b2:
89:c7:b3:87:22:77:bc:9b:81:84:4f:68:58:84:c0:
23:62:12:b4:7b:42:6f:40:f4:e1:d1:57:85:07:2c:
31:f9:3d:75:79:57:25:3a:3b:a1:1e:11:ec:23:fc:
65:59:71:d9:e2:d0:09:78:dd:7d:fd:5b:55:2a:77:
c6:fa:e6:e7:d0:4f:8c:1f:13:ee:7c:8b:95:22:3f:
66:fa:27:25:97:15:47:c5:ea:ef:d5:68:41:d2:16:
62:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.72.0/22
91.199.136.0/24
94.125.192.0/21
IPv6:
2a02:2ba8::/32
Signature Algorithm: sha256WithRSAEncryption
1a:4e:cf:c6:3b:2e:31:f3:c1:44:be:c3:1b:ac:4e:0d:ce:cc:
b5:7f:6b:46:c7:bf:29:e1:b6:91:f7:ea:82:97:1c:f7:b8:f7:
bd:14:09:cc:fb:11:c4:cf:b2:b8:e1:2e:9a:35:f9:45:20:8b:
c0:fc:f2:82:b9:6c:95:db:e5:ec:b4:0b:44:b6:22:bf:89:f3:
5c:d2:92:d3:2b:75:50:f9:72:ef:ad:2a:c8:a5:bb:28:9c:7d:
36:6b:02:b4:08:be:2d:12:eb:42:6c:ca:cb:94:f5:44:00:fc:
50:13:ad:e1:cd:68:f6:6f:c2:e7:27:ae:cc:32:9c:cc:f8:e4:
53:09:38:5b:d1:3a:7c:0f:89:76:3a:58:c1:b0:e9:18:34:d0:
f5:c4:8d:23:5c:07:4f:63:51:ff:2f:62:86:e0:84:55:3d:2f:
ab:c6:bd:34:16:77:e0:36:78:80:5c:a6:3a:5b:a5:e7:b8:53:
4f:9e:cd:b1:85:7d:50:73:ae:06:b2:03:91:e3:63:24:7a:95:
48:f3:a5:fb:0a:4d:5e:f8:bf:1f:fe:0b:06:ad:12:69:0f:b3:
a3:ad:06:5b:75:a8:cf:d1:5f:39:2e:12:25:20:4c:19:3f:e0:
77:f4:94:f0:a3:95:bc:eb:cc:80:12:e0:a9:c3:82:32:11:27:
19:87:04:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 04:22:56 2024 by rpki-client on console-fra.rpki-client.org