Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K2uCLt3P0SGdqpT8Q0Y8qLqux4A.cer
File: K2uCLt3P0SGdqpT8Q0Y8qLqux4A.cer (raw, json)
Hash identifier: L3U+c4IUCUT+qJAoBssVr06I/fX/zVvOp1ucyl2Hi/M=
Subject key identifier: 2B:6B:82:2E:DD:CF:D1:21:9D:AA:94:FC:43:46:3C:A8:BA:AE:C7:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424A8D6D66D5E93D84A9654F1F315E5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/9159ea-076c-49a5-916b-110b7e58ede8/1/K2uCLt3P0SGdqpT8Q0Y8qLqux4A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/9159ea-076c-49a5-916b-110b7e58ede8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.186.172.0/22
IP: 2a0a:4840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:a8:d6:d6:6d:5e:93:d8:4a:96:54:f1:f3:15:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b6b822eddcfd1219daa94fc43463ca8baaec780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fc:a9:54:1b:4e:0a:5c:13:c7:67:6a:55:9e:
5f:95:f0:35:6b:1c:80:66:d9:cc:30:51:44:74:34:
05:46:dc:94:17:e1:41:3f:0d:8c:82:fe:4c:f1:73:
ae:0c:59:44:d6:65:ae:83:b0:f8:20:3c:8a:22:85:
c7:7f:d9:f3:14:47:57:b4:c4:54:da:0a:7a:b3:80:
fc:95:73:af:bd:24:1d:2c:44:2c:da:dc:95:8d:28:
b7:6a:d3:ab:87:80:72:ef:a0:f0:8b:3e:f2:6b:c1:
8c:f8:87:7f:31:44:64:a1:55:ad:31:67:93:0d:16:
57:f8:93:13:6e:da:cd:65:59:e8:2b:e8:8c:b0:d5:
7b:f6:35:f1:d6:2d:73:26:ac:69:9e:68:37:a9:57:
2e:1a:3d:a9:06:09:d9:b4:7b:89:c6:b7:78:18:34:
30:65:74:16:6a:6f:9c:dc:70:6d:53:b4:7f:e3:14:
56:d9:cb:3c:45:9e:76:79:45:96:3d:1c:58:a2:ce:
b5:5d:7d:57:f1:f1:68:85:ea:54:9e:ab:f0:71:89:
d6:4e:8a:20:ad:d4:35:56:1f:e4:c8:ee:88:e7:9c:
84:63:45:37:d5:58:e2:af:68:80:13:ba:2e:21:24:
b7:8e:b9:53:d3:a4:73:b4:51:19:71:3c:5e:0a:8f:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6B:82:2E:DD:CF:D1:21:9D:AA:94:FC:43:46:3C:A8:BA:AE:C7:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9159ea-076c-49a5-916b-110b7e58ede8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9159ea-076c-49a5-916b-110b7e58ede8/1/K2uCLt3P0SGdqpT8Q0Y8qLqux4A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.172.0/22
IPv6:
2a0a:4840::/29
Signature Algorithm: sha256WithRSAEncryption
46:65:b1:17:c8:93:9e:24:7c:69:4a:60:2d:91:94:8b:b1:df:
08:68:38:f6:ac:a4:3f:70:9d:41:18:2c:f1:67:50:5d:fa:ab:
09:a6:a0:06:b3:cc:85:a1:ed:0b:ed:47:35:67:d8:00:8b:0e:
9f:58:9d:70:fa:32:0c:4c:2b:ce:09:74:d5:9e:dd:11:38:8f:
1b:ea:db:f2:d5:b5:08:77:f2:3b:47:59:c6:af:a4:48:8c:58:
dc:04:d9:10:c2:91:1c:f2:92:0d:75:9a:b6:1f:1e:f6:32:58:
fa:4a:65:77:01:60:a9:a7:06:0c:93:7b:e3:e4:7a:e8:9d:fd:
46:1d:f7:10:8c:22:54:86:8c:c3:f5:d1:21:15:27:39:5f:9a:
ef:29:e7:19:67:4d:bf:ef:36:1f:e3:f1:7e:a4:33:7d:68:bd:
0d:3f:ad:dc:fa:c5:1e:73:dc:a3:b9:ea:ca:40:93:2e:cd:b0:
67:f1:66:fe:50:45:3d:a8:d6:72:0d:86:5e:48:26:b1:63:4b:
59:77:9e:10:74:56:4c:a5:8e:35:fd:26:51:c1:5a:93:a9:3c:
5e:8d:c5:d9:08:3a:93:93:df:5d:4e:0b:6b:21:30:14:df:a4:
64:bb:70:5e:1e:f4:bb:3b:21:00:68:8c:8f:b2:51:e1:0d:cf:
fa:12:ae:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:28:15 2024 by rpki-client on console-ams.rpki-client.org