Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
File: STKJJW4ziHd9leTVMVZ842cqFJo.cer (raw, json)
Hash identifier: E0YWvGc7fn6MB7ngUXjnkwYnlDFckNebvoIijB1Ckg0=
Subject key identifier: 49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424F57D4B9D969F4CB931601B25BEAF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.85.164.0/22
IP: 194.145.180.0/22
IP: 2a03:7460::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:f5:7d:4b:9d:96:9f:4c:b9:31:60:1b:25:be:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=493289256e3388777d95e4d531567ce3672a149a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:61:cc:c3:2c:61:3e:bd:ec:f3:cf:a9:f1:
30:5d:80:90:e0:b1:e5:40:97:97:ef:75:22:8c:91:
06:1a:0f:78:a7:2c:59:84:9f:33:4a:5e:7f:79:4d:
74:a6:44:e4:66:44:13:77:58:60:25:4f:08:e4:fc:
2c:16:fa:e4:48:a0:17:15:60:31:b0:04:22:b3:19:
75:d8:86:4e:b0:83:2e:b0:f0:a5:72:53:21:8e:83:
65:86:5a:e6:5e:a8:fd:5f:2e:5b:4b:11:3e:5e:c3:
61:43:fd:3e:2b:2d:7a:c9:51:47:5a:be:a3:6b:52:
98:af:8c:0b:7f:cf:b4:f8:a5:d6:1c:e4:3d:43:a8:
5a:f6:c6:97:43:5e:47:90:d3:13:11:c8:ee:24:5c:
56:60:84:3f:50:54:53:60:16:ab:da:c1:b0:e6:e7:
a5:ab:36:87:fe:73:1d:ed:56:b4:b2:dd:e3:f6:5a:
52:a2:56:d2:f8:66:4a:2a:97:e6:d2:a9:ab:a7:58:
e0:cd:d8:70:97:dd:f4:b1:23:b1:9a:55:eb:ac:85:
6a:37:59:fa:e5:a5:50:3b:38:25:a8:d4:b1:67:19:
02:59:22:ed:b0:48:19:d9:7b:ad:31:80:5a:02:3d:
67:35:bb:6d:96:bb:4d:be:4c:34:00:7e:24:0e:98:
b5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.164.0/22
194.145.180.0/22
IPv6:
2a03:7460::/32
Signature Algorithm: sha256WithRSAEncryption
7b:f7:bc:08:3b:69:97:bd:17:ee:65:c5:48:4e:f1:b4:c5:79:
c2:78:2e:70:c2:b1:73:d1:e5:2f:63:59:5e:be:3a:11:72:a0:
fe:e9:9b:d6:5c:cc:72:46:73:dc:84:f9:4b:9a:1e:ef:e8:06:
0a:99:44:ec:66:da:32:15:b8:85:86:e1:3c:1b:c3:e4:dd:d7:
54:18:ac:a5:60:bd:15:b9:3e:85:2a:18:05:0b:84:5b:5e:58:
e4:67:cd:9c:7e:ff:d9:d0:76:e7:e2:7e:67:21:6b:e6:bc:b0:
a5:47:01:e6:10:14:a7:c3:a3:ec:16:e8:86:4f:c2:4e:95:22:
57:83:95:1c:36:9b:41:bc:a0:3e:8f:7b:2f:1e:5d:e5:3e:51:
50:40:46:25:85:b2:29:84:3e:17:58:04:60:18:57:18:52:f9:
ae:77:55:d0:7f:dc:4a:e1:81:f8:8a:b3:af:ad:fa:c6:3b:b8:
c5:26:28:33:16:1f:99:69:00:85:29:5f:c1:d9:90:a2:29:b4:
e6:de:19:45:12:47:b5:63:c1:85:b6:8a:83:82:20:f7:37:b2:
cc:4b:55:e6:40:53:1b:3b:6e:14:2c:32:57:ee:3c:26:22:fc:
08:6c:e5:b3:2a:68:d1:1b:0c:38:2d:30:59:df:0f:ab:73:a9:
85:47:eb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:00:58 2024 by rpki-client on console-ams.rpki-client.org