Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
File: RxG7s-u50tFww3xioQzNwikVVEs.cer (raw, json)
Hash identifier: tkXASX+9lKd8EZpTOlRRVVrCVCWvS2jf/rv7FVSOzU0=
Subject key identifier: 47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E16B2B7188663B9AFB02D28887185
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 83.136.152.0/21
IP: 194.15.188.0/23
IP: 194.15.192.0/23
IP: 2a02:2a88::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:16:b2:b7:18:86:63:b9:af:b0:2d:28:88:71:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:1a:72:6f:f9:b9:5e:ac:83:d3:bf:27:0f:
f0:d6:f8:37:4c:42:2e:70:11:10:0e:2f:83:78:38:
5d:f6:ab:ea:aa:9e:a5:60:c5:17:f7:52:66:21:58:
3b:1a:25:e0:91:ab:f9:6d:0b:2e:e2:0d:ce:50:52:
98:61:f1:18:05:4a:57:26:64:8f:3b:35:aa:c4:eb:
a3:d5:0b:08:41:a8:8c:1a:35:0c:d7:95:80:58:3b:
8a:57:6f:df:7d:4a:fe:5f:60:ef:98:4e:7a:47:c4:
c1:31:e9:b0:78:1e:09:9b:96:de:54:cc:91:06:14:
51:dc:4b:2c:60:6e:65:fd:e9:9f:cd:e1:82:84:95:
e1:26:ad:a9:1f:ad:6c:9e:2c:7a:8e:c5:f0:c7:1f:
af:09:13:3c:c6:d0:f0:3e:5d:11:b5:11:85:b1:29:
20:07:f4:19:84:82:6c:4f:29:23:92:54:63:6f:68:
ab:d5:64:54:57:be:da:9e:e7:70:79:5f:4a:c1:87:
a0:9e:84:9c:9d:d5:48:1b:c7:fc:6f:8a:76:6c:4f:
25:e6:5a:52:88:80:57:f9:e4:91:b2:6d:bb:c9:09:
d8:a3:ec:65:b7:33:1c:30:1d:33:b8:6e:c6:f9:5c:
ab:0e:69:5c:e1:1b:bf:8c:18:cf:85:1d:9c:0f:17:
29:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.152.0/21
194.15.188.0/23
194.15.192.0/23
IPv6:
2a02:2a88::/32
Signature Algorithm: sha256WithRSAEncryption
35:3a:a4:22:90:78:f3:5f:6a:08:43:95:2d:69:14:c5:34:6a:
2e:05:0d:16:d1:0a:d9:7a:e3:53:a7:0b:f4:d8:6d:11:ed:d6:
42:07:8d:ed:eb:e9:aa:f2:8d:86:73:d7:99:15:c8:a1:84:c1:
01:03:8e:20:39:f1:a8:f7:2d:f3:05:a4:e1:e1:9b:27:1b:2e:
5d:a9:04:11:2c:d9:26:a7:dd:d7:fc:e9:2b:78:db:80:8e:db:
74:8f:b7:61:21:74:db:1e:b0:1b:db:23:59:a7:e5:6b:f7:2a:
86:ba:6e:30:53:eb:a3:0f:4d:eb:cb:53:43:7e:98:bf:f7:09:
6d:ef:23:76:2b:89:0d:85:aa:03:c1:1d:3f:78:95:d1:a1:d7:
58:32:80:8c:94:b8:1e:67:8c:19:4a:7f:47:4c:35:ae:aa:ec:
a1:2c:66:f7:87:f5:c6:1a:b0:91:e0:ec:13:93:53:cd:fe:85:
a4:52:01:23:34:1f:c6:3f:26:da:cd:f7:ba:5e:8d:af:83:32:
93:26:94:7f:58:d3:22:db:da:45:1b:b0:4c:ce:f5:98:3d:6e:
1b:ba:2c:47:2e:a9:bb:3d:49:3d:40:dd:1d:84:0d:2f:58:a7:
8b:85:0a:5c:51:2b:7f:40:87:4d:8d:5c:6f:10:88:42:aa:0c:
a9:5b:d8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:45:09 2024 by rpki-client on console-ams.rpki-client.org