Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
File: KL8ecjI3QqxNgTarbI6F33ujfus.cer (raw, json)
Hash identifier: tcmJAlX8VJ6psACwrncnfuldY6VFfI1qDJR+VlFrA/I=
Subject key identifier: 28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8701C726D486DE9A68667F33EC7110F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.249.140.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:1c:72:6d:48:6d:e9:a6:86:67:f3:3e:c7:11:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:db:54:17:59:f8:72:87:f9:5f:fb:78:7d:3b:
e2:44:91:ec:f6:e6:bc:18:c6:73:49:11:34:72:19:
39:24:4c:a8:5e:64:01:1b:96:8c:18:bf:a2:95:23:
11:49:ea:a2:aa:8c:be:5c:25:ae:49:dc:81:a8:2f:
85:cb:8c:e9:59:2e:1a:cf:31:09:a5:f5:d2:b6:11:
8d:c6:53:5d:fe:2d:c2:9c:ef:5d:ac:71:bb:3b:78:
76:6c:a8:4c:44:11:11:af:9c:55:f4:65:96:ab:62:
99:76:b9:fa:3d:78:11:cb:08:de:47:19:19:d7:b3:
10:32:fb:77:75:23:76:59:a9:f9:11:70:69:92:31:
41:40:f3:26:a4:1f:a4:16:36:1e:47:85:a8:20:be:
e5:15:d4:70:aa:28:d8:de:a6:ab:86:e9:e7:c2:45:
fc:ac:2a:9a:e2:a3:55:6c:c7:a1:f7:30:60:74:60:
eb:a9:93:37:04:24:8b:83:db:8a:9c:be:9e:93:e4:
7d:3e:ee:0e:c2:fc:42:96:16:2a:8b:9b:c1:1c:a5:
c1:84:82:0a:84:01:01:82:1b:fa:57:3a:39:04:4d:
46:93:a2:2b:0c:5b:70:02:64:f9:e0:d2:e9:3a:63:
ee:cd:a8:46:ae:06:bc:95:a3:23:c4:67:60:cb:78:
97:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.140.0/22
Signature Algorithm: sha256WithRSAEncryption
99:00:b9:29:42:89:43:a3:17:fb:cd:90:b9:e4:64:4e:eb:30:
3c:50:e9:85:47:01:b4:7a:f6:8f:ec:41:c4:d1:06:71:6b:fc:
b1:49:13:c0:0b:23:1b:e8:dd:1d:4b:d6:6c:34:14:e6:82:42:
3c:0a:41:ff:b5:c6:7e:7d:c1:09:df:89:fa:76:84:ce:07:0e:
96:fc:83:9a:de:fe:a7:79:d5:97:b8:a0:06:c8:e8:ed:f7:7d:
3b:2b:16:e8:5b:28:b6:d3:05:37:8a:f1:89:9f:7f:3d:53:52:
86:a4:be:4c:b5:c4:c1:6c:e6:48:07:04:19:63:5b:10:93:ea:
d7:b7:9a:77:12:ac:ec:02:7b:9a:24:7e:e8:62:27:18:01:1c:
a0:30:7c:f3:73:3e:76:d5:e6:13:c7:f9:e8:6d:44:d1:52:31:
6c:48:90:bf:0e:be:26:5c:48:6c:8d:27:66:d6:53:95:8a:11:
f9:8b:5a:e3:9a:9a:c4:bf:a8:95:c8:20:2a:d8:98:10:d2:be:
99:b2:14:3c:41:c1:39:b5:fb:12:81:92:52:91:53:eb:2e:d9:
b0:13:54:78:2c:97:8d:f9:df:71:4e:b5:cf:15:5e:cb:9a:85:
6c:61:5e:d3:6e:34:ed:42:c0:22:2b:09:5b:e0:c4:18:61:9d:
26:d1:dc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:08:35 2024 by rpki-client on console-fra.rpki-client.org