Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
File: _dlCLeliA-XYc-CZVZGjppDdPZI.cer (raw, json)
Hash identifier: m2dMw3KMIG5cVS7Xyqd8/iDTolZfNw5Gh6Ah/jTA/Ik=
Subject key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5000FB7FB70DA025C2C7F08AB51819A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 77.83.64.0/22
IP: 80.241.140.0/22
IP: 2a05:be80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:0f:b7:fb:70:da:02:5c:2c:7f:08:ab:51:81:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:3e:8d:2a:fe:b0:f5:90:9e:33:70:00:d4:
d6:eb:cb:92:7f:37:1f:17:8c:6b:2e:be:11:a9:c9:
aa:7e:b6:fc:15:5e:47:fa:9c:0d:c5:27:2d:20:4b:
f7:01:e8:b9:4a:94:5e:79:3f:56:30:1f:89:de:86:
a9:78:64:d3:f3:25:30:de:64:99:8b:60:a2:00:6c:
15:97:1b:33:8f:29:9a:7d:83:a3:43:33:69:10:34:
11:cc:74:3f:b2:f7:88:f9:15:ff:32:13:60:7d:c0:
e7:26:5a:ad:ac:43:dd:87:cd:7f:11:16:18:7a:08:
d4:9a:ab:93:75:ee:21:e0:9a:60:1c:5a:4d:be:2d:
1e:62:1e:29:72:01:c0:e9:6c:1e:f9:f8:22:23:87:
ab:6b:90:72:8b:ef:a0:cf:89:f5:db:3c:e2:0b:1f:
ed:17:24:76:9c:35:4d:57:04:6f:2d:fa:8c:a1:21:
8d:be:3d:62:fe:df:04:c9:43:2f:33:fd:22:43:71:
f7:8c:00:48:d5:ee:0e:30:6f:6e:98:53:eb:a3:06:
c0:93:d4:68:1d:ff:d7:7e:e8:23:ab:b6:dd:6f:9e:
b0:78:5c:9a:5e:e9:1d:c7:29:e4:d7:ac:31:7a:f9:
9e:a1:5a:70:2c:9f:f2:48:a3:8d:09:84:25:ce:68:
64:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.64.0/22
80.241.140.0/22
IPv6:
2a05:be80::/29
Signature Algorithm: sha256WithRSAEncryption
62:16:91:eb:09:b3:7f:52:73:41:8f:6d:a1:ad:1c:82:e8:55:
6b:93:3b:61:7a:97:04:8e:82:91:2f:28:a1:28:b6:8b:94:0f:
db:a3:a8:7d:16:d1:1b:60:7c:b7:c6:30:95:36:05:b6:14:dd:
a8:e7:d7:21:f6:82:60:61:aa:35:1a:02:ee:ef:3f:bf:f9:21:
8c:c9:b3:4f:e2:99:58:a0:b9:a4:36:a8:ae:ee:ff:12:f0:5d:
8e:73:bb:c2:6d:7d:2c:56:cd:3f:f6:b0:b2:26:13:4e:c9:88:
9e:33:f5:0f:40:06:d6:1d:39:ca:eb:68:49:de:89:75:43:2f:
dd:c3:34:2b:08:72:ad:a4:4a:51:45:19:3b:21:eb:b5:e8:25:
16:4e:ef:2f:8f:9e:aa:db:45:20:12:ca:1b:3b:ac:e7:c3:e5:
b4:be:3e:f1:b1:3d:e9:6c:03:08:13:e8:4a:2c:1d:7f:ce:5a:
c0:f7:af:09:5b:6e:a0:ce:d7:25:36:86:cd:e7:2a:55:64:2d:
0c:95:36:62:2b:e8:e0:a0:ab:36:89:f7:c3:d9:96:19:8c:d2:
a8:5d:88:a6:85:a1:a2:c3:81:10:bb:05:7f:af:45:64:28:18:
59:6c:77:39:65:0c:2b:4b:1f:50:88:db:2a:83:4f:4e:1a:23:
74:49:5f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:23:26 2024 by rpki-client on console-fra.rpki-client.org