Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R8bfanwj5tVZfqlB4qu9FqqCOdI.cer
File: R8bfanwj5tVZfqlB4qu9FqqCOdI.cer (raw, json)
Hash identifier: qceB3O1ANJzPr5Ospecl6EbpzlNK010ByDGwxHlGdp4=
Subject key identifier: 47:C6:DF:6A:7C:23:E6:D5:59:7E:A9:41:E2:AB:BD:16:AA:82:39:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5007A565CCEE0037B917231650A6581
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/593065-bab4-4b6d-959a-45dae6fedc33/1/R8bfanwj5tVZfqlB4qu9FqqCOdI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/593065-bab4-4b6d-959a-45dae6fedc33/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.83.228.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:7a:56:5c:ce:e0:03:7b:91:72:31:65:0a:65:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47c6df6a7c23e6d5597ea941e2abbd16aa8239d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:f5:98:a2:07:28:bd:39:3d:75:d9:d7:81:
5c:8d:66:c5:4b:77:1d:c2:d4:59:f8:21:87:5f:1c:
2b:b9:5d:5e:44:11:6b:6a:d9:f9:2c:38:65:c3:b3:
b3:aa:76:e3:2f:db:ab:3a:5b:0b:f0:99:58:73:e6:
e4:7c:df:46:f6:0c:e4:2a:a8:95:3d:a4:bf:c2:7e:
e7:50:99:7a:39:9b:67:ca:87:de:2f:c9:5b:ee:ea:
64:95:e1:9c:73:25:57:92:66:6d:f8:c8:92:ea:03:
d1:e3:3d:3c:7b:12:cd:29:cc:c8:df:66:be:26:27:
92:f2:0e:ce:28:5b:3d:7b:58:4b:18:4c:67:1a:b0:
c5:4b:9d:f7:34:66:16:a6:bd:c2:ec:2d:96:38:cc:
de:f9:8a:80:c3:f9:e6:24:eb:58:76:9a:3e:a1:22:
82:fe:c6:d8:c9:2c:5b:5d:7d:71:3a:11:59:f5:ac:
24:57:bc:e6:56:8c:e3:ad:3e:a8:18:4b:22:85:34:
49:d3:9f:5f:e2:77:f4:3a:b9:9a:3c:44:52:23:4d:
86:31:de:46:ce:6a:4e:7e:47:49:95:2d:b9:91:e2:
5b:9e:cf:7f:ce:9b:63:08:eb:c6:b3:69:4c:32:b0:
65:12:bf:da:94:f3:48:86:24:dc:32:da:28:f9:7e:
b3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C6:DF:6A:7C:23:E6:D5:59:7E:A9:41:E2:AB:BD:16:AA:82:39:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/593065-bab4-4b6d-959a-45dae6fedc33/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/593065-bab4-4b6d-959a-45dae6fedc33/1/R8bfanwj5tVZfqlB4qu9FqqCOdI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.228.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:5e:a7:69:86:5c:10:8a:ca:4b:ca:9f:4e:90:f7:9e:53:1c:
f9:0a:15:a3:65:46:34:e8:fe:65:e9:f1:08:0e:6f:1d:2e:3a:
13:d1:db:8f:97:59:e9:22:e9:14:78:39:a4:b8:a8:67:45:cd:
f4:1b:74:0e:e9:88:92:ee:6c:2d:5c:b2:dc:07:0d:72:ea:4d:
b7:44:05:f0:cc:bd:dc:e1:78:88:81:b0:b5:62:91:68:9b:65:
47:21:f5:03:f5:95:8a:9b:c4:e1:d2:04:c1:16:a8:3f:b0:12:
8a:7c:3e:1e:ec:47:4d:3c:cd:26:9e:c4:f3:08:50:3e:ae:1c:
38:e4:0d:db:02:0c:58:4d:06:d8:46:05:42:22:92:1c:8b:ac:
5f:e6:5c:fa:22:32:3f:64:10:69:ab:64:a7:fa:46:a2:2a:9d:
df:ec:88:37:6a:fe:5e:a4:13:06:64:8c:b4:ee:81:5d:88:7e:
37:d9:cb:e5:48:b6:45:83:0b:43:ff:75:9c:79:de:75:f0:28:
cc:1f:99:5b:7c:03:e4:87:da:81:c9:41:87:f1:53:dd:3c:1b:
99:d2:37:2f:eb:e2:4d:4b:26:83:b5:4b:97:33:ed:ba:87:f6:
f9:62:70:df:13:a5:31:36:15:5c:d7:dd:79:8c:af:e9:d0:0a:
0d:c0:99:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:14:35 2024 by rpki-client on console-fra.rpki-client.org