Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
File: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer (raw, json)
Hash identifier: m1xbLrUOMQI18CvFfweynl6jaZwoRolNM7jtpPzZaeo=
Subject key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64A8C0FC4E749ACD22B164AB89AED55
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.218.120.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:8c:0f:c4:e7:49:ac:d2:2b:16:4a:b8:9a:ed:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:c8:88:2e:e1:07:9a:c5:11:f5:22:d9:6a:
11:f6:f4:dc:df:98:a2:b7:b5:2d:19:b5:b7:44:22:
f0:ab:fc:a1:48:27:6a:c3:e1:9f:d8:ee:b7:d3:df:
73:21:8f:66:98:eb:63:b3:10:f6:5a:3b:0d:6c:e3:
4e:ed:31:40:a4:e9:89:33:a1:e8:6d:46:cb:3d:90:
e7:18:04:ac:f0:de:00:c1:5f:b1:e9:64:78:b1:d3:
94:a3:d9:ac:6f:0f:49:ff:10:16:a5:70:3d:16:86:
31:3b:90:21:35:ec:68:c3:33:c3:5c:60:15:bb:b8:
7b:30:de:31:db:cb:6a:6b:5c:a9:6f:51:26:95:c4:
ea:85:f7:b0:1e:01:f1:72:ef:c2:5d:d4:1f:2a:4b:
4a:7f:64:a4:d4:1e:09:2f:0e:e8:84:4d:be:de:6c:
b9:e5:6a:6f:83:39:67:26:2c:99:39:06:e1:43:05:
ff:e4:c5:5c:5f:63:cf:b3:3c:b7:23:4f:98:31:68:
8e:9d:1f:c5:8e:cf:79:02:46:a7:f7:22:f8:be:0e:
17:f1:b2:f4:f2:87:ab:01:b9:d3:1b:b1:a1:36:5d:
f1:2d:c6:c6:d1:48:f2:82:19:55:74:e1:6d:64:43:
68:60:75:c8:9c:f8:9f:9f:23:54:c1:c3:0c:8f:de:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.120.0/22
Signature Algorithm: sha256WithRSAEncryption
96:75:71:91:cb:2a:38:94:a7:bd:86:07:f0:db:8e:43:96:5f:
2a:31:0d:8c:f2:ec:13:49:2d:7f:6e:2f:3a:0f:87:e2:5b:f5:
eb:c3:92:0a:a8:20:6f:dc:fb:0a:11:fa:c9:fa:95:b1:a0:a3:
bf:a2:ce:2c:a2:8a:e8:56:27:cc:ec:33:94:f7:32:72:f8:c4:
23:11:81:51:eb:9d:e0:8d:b9:4d:97:c7:b8:04:02:b1:89:b8:
82:62:15:54:f5:27:33:9e:7c:99:15:16:f7:b3:8f:7e:4a:9e:
6f:f3:6e:08:51:cf:02:a5:dc:d7:b2:70:d5:91:f0:7e:17:22:
33:6d:8d:81:46:08:12:a4:5c:c7:ac:2e:8a:6a:ed:18:0c:6a:
ed:95:1f:ea:90:2a:83:65:45:bc:2b:82:86:17:8c:ea:07:86:
28:e4:e6:3e:7f:31:16:28:24:6d:20:70:3e:41:15:1d:3d:ab:
8b:c9:45:ff:2d:a0:b7:6f:f0:63:36:df:00:ca:9c:3e:b0:cb:
71:a3:b9:54:05:4c:2e:8c:ac:29:8b:78:76:81:a9:a5:3e:a7:
a3:b9:f3:f8:d7:32:45:1f:d3:c9:6f:ad:8f:20:40:23:f4:f7:
50:36:2d:fd:60:e0:65:8a:b1:f6:26:46:f9:c7:07:c8:8e:db:
03:fa:c7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:08:21 2024 by rpki-client on console-fra.rpki-client.org