Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
File: b4bJ980XO7zR22Hg8bTr4FwbnKE.cer (raw, json)
Hash identifier: DTJ+xjSdI9vqOAsPpWjPWPsEChNLAI1aJ5uIk8Q53pM=
Subject key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DADA9DD1E8ABB17D2CB8D660840AEF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.189.74.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:da:9d:d1:e8:ab:b1:7d:2c:b8:d6:60:84:0a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d4:46:0b:51:d7:67:2a:2f:bf:89:6a:13:d5:
c4:1f:25:44:c2:8c:f6:bb:5b:38:b8:fd:04:d5:61:
cb:a0:94:a6:5f:2b:bc:fb:77:c8:5d:7e:37:1f:ce:
5f:d9:f6:b4:79:d9:4e:0e:25:3d:53:21:65:a3:e1:
90:0f:08:f6:97:c9:cc:64:73:92:28:0b:f6:b3:9c:
12:55:49:af:76:df:99:ab:05:b0:78:ff:2a:f7:91:
ec:51:b8:c3:1d:a0:72:c3:fa:e5:4a:4f:44:8d:6b:
b1:9d:50:42:8d:d7:1b:3a:f1:9e:f6:1a:17:6a:cc:
6a:f7:86:6a:d2:2f:86:47:37:74:e9:98:21:22:15:
55:05:e3:69:91:6a:ee:bc:a1:93:a0:f7:63:6d:e2:
a7:ab:a5:5f:7e:ae:5b:36:0d:57:1a:f4:85:53:2b:
cc:b9:80:82:c6:9c:5b:ed:0c:64:22:ff:2e:7e:f9:
05:78:fb:9a:4d:c5:b4:c6:c0:68:69:dd:29:a5:39:
e1:e8:d5:00:cd:34:25:4b:e3:2b:3c:7f:11:4e:b3:
ba:4f:88:6e:96:ed:09:a5:23:d4:7d:9d:ca:e0:df:
4f:87:5a:f3:b8:d9:a8:cc:5e:de:0b:48:9f:2d:c9:
46:c0:3e:ed:b8:c9:8d:e5:8d:b2:a9:2e:6b:fa:7a:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.74.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e7:65:d0:1e:c8:45:59:f5:d1:e9:72:b6:1a:75:47:79:7e:
27:ac:62:78:4d:8b:5c:e6:c9:36:ff:7a:da:9c:47:fe:e6:38:
83:f7:bb:0b:cf:d9:42:7c:c4:67:d4:f9:ab:0f:e7:c7:01:4d:
58:e7:93:0a:1e:29:b5:4b:28:70:5c:b8:0e:f2:44:94:91:7c:
4d:d4:89:4f:d9:e1:17:51:2f:fc:1d:d0:03:22:e1:b8:70:32:
da:f6:f6:b2:2b:f0:d5:90:ac:66:9f:58:74:a0:5a:7d:c6:28:
2c:cf:ac:3a:ac:e3:b7:62:ae:64:39:10:26:c8:53:5a:98:56:
74:8b:fa:aa:6d:dc:95:48:97:fe:f3:70:84:ea:cf:89:93:6d:
a3:e4:a3:91:6e:b4:6c:15:4a:36:4a:0d:e0:b4:13:1e:58:32:
cd:ae:e7:90:a9:83:25:b4:4b:37:02:f7:0e:9f:4a:8d:f7:38:
7c:59:f1:f2:3d:af:d3:5d:a2:78:aa:58:7b:f4:d2:31:3c:75:
71:f3:ba:3d:fa:10:af:7a:1e:eb:f1:f7:ba:97:a1:97:b9:a9:
0d:3a:15:11:ba:69:2b:e6:ee:6c:be:a5:ea:b7:96:30:7f:89:
c1:ea:58:bf:8d:d3:bf:9e:ef:6f:1c:2b:b6:9c:be:eb:44:84:
aa:69:02:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:53:33 2024 by rpki-client on console-ams.rpki-client.org