Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_k_g5EVyhE4fDrGrzInvtsyIqyk.cer
File: _k_g5EVyhE4fDrGrzInvtsyIqyk.cer (raw, json)
Hash identifier: ZaKRlXrbo+b1JFMEAqFKnUg+MFzA7Z0JnfLq7B/4kNM=
Subject key identifier: FE:4F:E0:E4:45:72:84:4E:1F:0E:B1:AB:CC:89:EF:B6:CC:88:AB:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF4BF8A84111B1F34F389709C8FA46
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/71381a-065f-4cae-85bd-465cf52cd128/1/_k_g5EVyhE4fDrGrzInvtsyIqyk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/71381a-065f-4cae-85bd-465cf52cd128/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.108.224.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:4b:f8:a8:41:11:b1:f3:4f:38:97:09:c8:fa:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe4fe0e44572844e1f0eb1abcc89efb6cc88ab29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:2e:16:08:d8:ca:fe:99:db:6a:71:ef:be:
37:0d:33:40:b1:ed:b6:13:c0:a2:46:ef:4c:0c:6c:
65:47:d8:f9:6d:27:fd:07:5a:9b:4b:1c:48:34:35:
a4:84:8c:30:ac:34:b0:9e:04:73:cc:e4:80:2d:cd:
5a:99:a3:28:7a:60:5a:e1:37:55:af:cb:84:c8:a7:
28:34:e4:66:c2:3a:cf:e3:b3:41:6a:d4:35:8e:99:
13:14:57:60:34:5f:9c:22:c7:b2:8f:9f:02:7d:64:
8e:0b:07:0e:5c:b8:4b:0e:09:f8:46:c2:07:9d:b1:
e8:94:48:12:2b:ae:34:f6:98:bd:fb:98:79:29:73:
da:1b:85:e8:97:6d:f9:26:13:9d:1d:66:94:d1:26:
b3:6e:f1:89:62:61:9a:2f:a1:1d:28:ff:9e:8e:6c:
1c:50:c3:66:81:fe:38:83:0a:b6:40:8f:5b:e6:00:
c9:69:23:73:f5:23:6a:9e:5b:bc:3f:70:14:36:67:
33:25:19:d8:53:42:a1:2e:cd:de:2e:0e:48:f8:65:
2e:6e:59:af:d4:c9:1f:68:cf:a4:c8:80:1e:3e:d4:
bb:78:d0:24:e7:95:83:d8:78:9e:d0:68:7a:f7:39:
d7:ca:41:2b:8a:bd:67:c6:26:c6:9a:10:81:5d:2a:
74:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4F:E0:E4:45:72:84:4E:1F:0E:B1:AB:CC:89:EF:B6:CC:88:AB:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/71381a-065f-4cae-85bd-465cf52cd128/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/71381a-065f-4cae-85bd-465cf52cd128/1/_k_g5EVyhE4fDrGrzInvtsyIqyk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.224.0/23
Signature Algorithm: sha256WithRSAEncryption
65:2f:db:a5:80:00:8e:bd:94:ad:13:f8:df:44:f2:f6:29:b9:
08:7c:27:d7:e1:3f:e5:cd:c4:27:1a:ba:22:c9:f6:6a:98:cf:
b4:82:e4:3e:d8:6d:45:30:0f:07:03:86:76:36:23:39:e2:c4:
8e:6b:86:65:49:e4:94:e8:32:f8:a5:13:f3:2d:11:de:9e:7f:
2b:8a:6c:62:25:f3:fc:34:c5:04:8a:78:ac:21:dd:88:bd:87:
20:7a:87:01:53:96:69:8e:9a:be:d3:53:47:39:d7:39:54:77:
4c:e5:b1:55:73:0a:a1:d3:a6:0b:fb:74:36:f1:8c:97:ed:1a:
6c:ed:ad:71:9e:2a:d7:ce:18:36:01:cd:b9:94:88:95:fd:3b:
9e:f9:76:38:b5:6e:9b:34:c5:68:48:90:5c:e9:10:47:00:fa:
21:ab:d7:36:61:64:ba:b4:87:b8:d9:ee:ff:b1:65:97:71:08:
a3:cf:f4:af:27:1f:a1:c8:03:49:13:ae:24:52:49:fb:3c:2c:
d4:ef:5d:f0:c9:29:d2:0a:e2:17:7a:8e:c3:ce:64:ce:10:2a:
dd:05:0a:fa:04:5d:dd:e6:dd:3b:b8:31:55:f6:db:41:89:92:
71:3a:56:8c:c5:80:c5:25:b8:d6:15:e3:47:75:4a:10:17:62:
c2:10:e1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:25:28 2024 by rpki-client on console-fra.rpki-client.org