Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KNX3dyLGFlf4HJ965JznKbWA9ng.cer
File: KNX3dyLGFlf4HJ965JznKbWA9ng.cer (raw, json)
Hash identifier: HMr1lhvHcUckJQKjfTRfSJ1mY+x8Tj+61VPKPYlqNzs=
Subject key identifier: 28:D5:F7:77:22:C6:16:57:F8:1C:9F:7A:E4:9C:E7:29:B5:80:F6:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2B9ABB5555F0BEB171004D8787C90A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/KNX3dyLGFlf4HJ965JznKbWA9ng.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:35:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 87.104.192.0 -- 87.104.239.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:9a:bb:55:55:f0:be:b1:71:00:4d:87:87:c9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:35:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28d5f77722c61657f81c9f7ae49ce729b580f678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:2b:14:b0:04:5c:04:60:b3:ff:1d:4f:7c:
4e:47:13:ba:71:c2:c4:49:f0:ce:48:e9:8c:eb:37:
b7:eb:ec:9a:26:52:6d:b3:82:14:bd:5e:31:8a:f3:
27:fb:cb:95:0f:3f:fd:3c:7d:48:1d:ca:eb:ea:2c:
13:fc:2f:7b:a1:db:dd:7a:9c:56:2e:0f:ea:a1:94:
e9:f5:f8:6d:78:63:b6:8f:23:ef:47:a7:d1:7f:34:
3e:86:79:20:18:e3:60:47:65:52:42:6c:9e:a8:78:
ad:fe:2a:04:52:67:d1:24:a0:97:ff:34:35:38:83:
e2:7c:1f:56:be:70:77:8d:e6:9a:ee:2c:85:33:b7:
b4:b6:5d:c2:dc:b1:34:95:c3:03:22:1c:37:21:37:
74:76:bc:71:01:f4:b9:c0:f3:6f:9b:a1:b1:3d:16:
25:bb:c0:f4:38:a4:d6:34:cc:f4:bb:6a:d3:bd:a4:
52:1a:71:53:69:51:9c:b6:e0:2f:b6:f9:99:ce:e0:
2c:cf:74:42:92:33:4d:b1:4c:f1:77:ad:d0:11:69:
80:19:ac:42:7f:dd:44:51:20:62:3f:51:c9:72:7a:
69:bb:59:a3:21:eb:3d:14:b3:10:22:34:f6:4c:0d:
cd:37:b2:1a:9d:26:ac:ed:eb:76:11:c2:8f:cb:d2:
fb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D5:F7:77:22:C6:16:57:F8:1C:9F:7A:E4:9C:E7:29:B5:80:F6:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/KNX3dyLGFlf4HJ965JznKbWA9ng.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.104.192.0-87.104.239.255
Signature Algorithm: sha256WithRSAEncryption
3d:49:f3:bb:f2:1f:1f:dc:50:a9:35:fd:06:51:33:86:d6:ae:
c5:dd:0c:bd:fe:57:75:2e:9e:7c:40:ce:5c:21:d6:7c:c1:5d:
89:66:62:41:f0:1d:5c:90:75:39:08:a4:8e:29:ee:e0:27:b0:
02:e9:4a:27:28:ad:29:1a:ee:b6:c4:b5:bd:7a:9c:a7:1b:e7:
80:b6:1d:2b:87:f6:cf:01:93:fd:93:96:71:67:ed:cd:67:bf:
bf:ab:62:4c:cd:a8:32:08:ff:57:c2:32:f9:8a:1a:73:05:27:
de:d0:20:fd:a5:ba:d1:71:77:4b:31:95:4f:48:25:41:a3:37:
d6:34:01:8e:dd:a9:a6:2a:c8:b8:99:4c:8a:e8:05:3c:65:0d:
e4:05:20:2a:7c:48:f5:3f:a4:c9:06:b8:46:42:79:51:18:5c:
ef:ff:e4:2f:37:80:d5:cd:e4:09:54:e9:c9:24:23:62:b4:d6:
1f:ba:27:b6:ee:a1:bf:9d:f3:48:7d:1d:69:5e:d7:37:4c:c7:
02:5e:b2:ef:74:e1:8d:a9:8d:c3:94:c3:67:ea:bc:a3:8f:ab:
26:36:df:8c:03:f1:42:b2:26:ec:ab:29:99:33:7f:d0:13:c9:
f3:e7:6b:c1:59:57:31:4f:03:af:94:1a:9f:ea:d3:89:82:c0:
e5:a6:b5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:08:37 2024 by rpki-client on console-fra.rpki-client.org