Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.cer
File: KwsaUXc9Gg8J9ibmH-BXuBpDK7I.cer (raw, json)
Hash identifier: y1ESF71RQT8LVD+39EDTdSS3Ew96ZK+0rqexGqANMNY=
Subject key identifier: 2B:0B:1A:51:77:3D:1A:0F:09:F6:26:E6:1F:E0:57:B8:1A:43:2B:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8705CC068EF520B2C62CC162E124902
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.130.194.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:5c:c0:68:ef:52:0b:2c:62:cc:16:2e:12:49:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b0b1a51773d1a0f09f626e61fe057b81a432bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:0d:a0:62:7e:23:e1:09:2d:24:ca:e6:f9:
11:1b:35:46:30:eb:05:62:15:32:a5:5a:cf:83:4d:
47:78:f2:33:75:04:cd:77:5b:c5:38:58:66:15:de:
f7:1d:65:61:3b:2c:3d:28:d6:2e:e7:88:c8:f1:3e:
d0:70:27:39:2f:58:f5:26:d5:a9:06:7f:cc:18:4c:
c9:81:22:21:38:5f:36:1a:5e:17:bf:9c:9b:c8:ab:
6b:14:f5:54:57:f3:6a:e4:02:c6:13:2a:fd:dd:d4:
9b:ae:5c:03:4f:35:63:a8:b4:7d:13:6f:97:58:44:
f8:6f:2e:0b:ce:5c:e5:aa:a5:69:90:a7:fa:0a:ef:
5c:71:09:0e:67:0a:b8:d6:d7:f5:8b:8a:8e:68:98:
4a:87:d5:47:68:55:2b:9a:1a:59:21:f8:f8:b2:77:
61:20:ea:b9:f4:42:21:f2:7e:bc:bb:e6:55:71:72:
cf:1b:51:fc:be:80:0c:e4:47:1e:97:04:36:b4:df:
7f:7e:a7:95:4b:92:b1:b7:c1:a7:b7:bc:3b:60:00:
13:9d:d5:2f:65:80:3a:99:c3:ac:f9:a5:9f:c6:66:
e9:2f:39:78:11:c3:6b:2c:3e:26:04:f1:16:61:9a:
67:f2:46:9b:b0:4c:c6:3b:9f:2e:7e:77:8e:5b:57:
33:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0B:1A:51:77:3D:1A:0F:09:F6:26:E6:1F:E0:57:B8:1A:43:2B:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.194.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:cd:fa:62:b6:9a:f5:80:e0:13:4c:f6:14:01:d5:c0:0f:6a:
58:0d:86:01:8e:23:09:f6:97:3e:92:ac:74:c9:90:97:b2:da:
fc:ce:b2:0d:50:47:f8:f5:33:7c:5a:f9:e7:91:20:54:8b:53:
1f:11:24:83:e9:cc:07:cc:d1:9c:35:9a:fc:d7:51:44:b1:15:
90:e1:9f:06:14:5f:d1:05:b4:18:b7:b4:4d:15:f4:33:d7:a8:
e6:ea:dc:7b:ca:30:a4:94:15:19:75:1d:5e:53:32:75:17:a5:
f2:c8:a8:45:fc:93:37:41:7c:f5:5c:21:f1:af:c7:af:f4:bc:
33:4b:da:26:9d:28:80:2d:e5:77:c8:a6:88:a7:fd:07:c3:1c:
6a:a0:90:01:77:0c:84:58:3d:53:30:d2:d0:5c:bf:e2:dc:85:
49:e0:cb:92:e2:eb:39:c3:d5:69:7e:9f:89:bd:e1:a1:23:c4:
56:88:a8:25:c1:87:8e:92:3a:ec:9c:2a:b8:47:96:0a:f2:8c:
3b:66:2a:53:36:fe:a2:e9:4d:39:52:8d:83:29:09:e3:21:d5:
5f:70:c7:18:c9:df:ba:9e:c9:92:cf:65:59:e9:83:d1:52:82:
af:12:31:7f:46:a1:0d:2c:31:0f:47:ab:fe:b2:32:46:b3:f6:
43:d0:a8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:09:11 2024 by rpki-client on console-fra.rpki-client.org