Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
File: PksGq_B-6qwRslmgj-Fx1mvSgw0.cer (raw, json)
Hash identifier: BfebkA0Ce5fqgBoIxRsRlI69eEguCvlmRRpvMDxOV9I=
Subject key identifier: 3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D850F05D4CD368E5BE7C630D3185038C7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 07 Feb 2024 19:32:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 176.104.176.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:85:0f:05:d4:cd:36:8e:5b:e7:c6:30:d3:18:50:38:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 7 19:32:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:89:54:ed:59:5d:f5:de:36:73:05:60:ee:24:
5b:04:35:da:c5:7f:5e:7c:69:86:6b:de:29:49:b0:
ba:3a:8b:29:a0:8f:96:43:75:5e:ec:7f:38:15:45:
cc:70:a7:31:e5:c1:0e:71:ff:40:b8:47:c0:43:92:
0f:46:d3:85:cf:43:58:12:30:86:01:ed:3c:87:2e:
75:12:6b:61:37:06:86:42:be:f6:3f:3e:8a:cd:72:
91:d0:fa:e3:6a:d1:b2:d9:0f:69:55:fe:23:2f:f1:
72:bb:0e:d8:5d:48:93:a9:f0:ba:34:bb:b9:df:49:
51:f9:2e:dd:3f:07:c7:f4:10:fc:73:82:10:42:2f:
a7:d1:89:04:cb:bc:75:bd:ad:e6:86:a8:29:fa:a9:
7c:93:88:d3:30:82:fc:fb:0f:05:c9:2c:f9:5c:6f:
70:12:94:7f:01:5e:1f:7c:76:6f:dc:ad:ad:19:63:
9f:6f:9e:43:c0:e8:87:00:0b:e9:d8:9f:61:d5:bd:
c9:3e:f8:21:af:17:5b:77:30:af:6f:34:18:48:7d:
aa:d3:44:64:fb:01:a3:6a:02:91:16:16:59:d1:35:
48:a6:b3:4f:5a:36:8d:45:84:fa:28:8c:e8:35:8b:
3f:b3:8e:9b:0a:2b:5d:f6:75:2b:41:2e:46:35:00:
61:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.104.176.0/21
Signature Algorithm: sha256WithRSAEncryption
29:5e:c1:2a:76:8f:93:6c:8c:91:4b:ea:f1:60:53:8c:95:84:
65:7a:94:25:25:98:48:1f:fb:d6:05:72:92:ac:4b:36:d1:61:
9b:35:d0:f0:af:5d:2d:2b:0f:0e:cd:4d:4b:bb:59:03:f6:c2:
6e:cf:d3:88:98:52:3c:d2:4b:1f:f7:cf:64:23:b1:13:20:50:
d6:54:18:8a:52:58:44:5a:52:33:c6:2a:9a:43:19:fb:d7:71:
50:1a:4c:c2:eb:56:fa:4e:5a:b6:3e:a6:5d:ba:3c:3e:22:c1:
ca:9f:a7:c3:54:69:8a:a7:ba:f9:1f:3b:b3:58:e0:c5:9b:11:
be:44:82:61:b3:03:8b:83:58:15:ca:3e:e4:c8:fa:3f:04:35:
1f:0b:84:2e:17:59:51:50:22:d3:48:d0:8d:2a:c8:bc:08:e8:
48:af:7d:4b:0a:67:53:38:d5:27:a4:28:33:f0:81:27:16:d3:
36:7a:8d:06:05:56:13:04:c7:a0:81:48:26:51:2b:2f:b4:5e:
19:34:c3:08:29:35:59:ee:e0:43:9c:d1:f6:0e:43:f7:35:24:
d1:34:e2:f5:a0:84:ea:03:89:d3:d1:f0:21:b5:53:d9:91:a0:
e3:90:34:3d:e7:9d:59:da:73:28:de:cf:7c:45:87:6a:a4:b4:
02:f4:32:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:31:30 2024 by rpki-client on console-ams.rpki-client.org