Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8FZaUBHicgVIlw3Rjqn4ds_LkU.cer
File: c8FZaUBHicgVIlw3Rjqn4ds_LkU.cer (raw, json)
Hash identifier: E7y0uFmVwu9a/Y+k7+qzB9ZVLai3n7g9jtYQ+KezPYo=
Subject key identifier: 73:C1:59:69:40:47:89:C8:15:22:5C:37:46:3A:A7:E1:DB:3F:2E:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CF2A124F49B0B77E5087DCB05EEC7189E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/974672-32b4-438f-ab4a-4454c2fcdb68/1/c8FZaUBHicgVIlw3Rjqn4ds_LkU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/974672-32b4-438f-ab4a-4454c2fcdb68/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Jan 2024 09:08:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.149.240.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:a1:24:f4:9b:0b:77:e5:08:7d:cb:05:ee:c7:18:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 10 09:08:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73c15969404789c815225c37463aa7e1db3f2e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:c8:01:42:8e:85:91:96:70:43:92:28:b5:
bc:7b:b9:93:5f:5f:da:80:93:b4:ab:96:32:ab:0a:
ed:88:03:2e:ad:46:9b:d1:d6:1d:b9:50:da:cd:69:
f1:f8:64:de:c5:12:e5:9d:86:80:88:f2:c3:0d:62:
4b:69:b5:98:c6:4c:37:93:9e:39:5c:d2:71:89:f5:
fd:d7:55:56:07:da:57:dc:6f:21:24:11:6e:07:1e:
c9:e2:3e:21:b9:da:d6:41:5c:cd:f7:28:ca:78:7c:
4a:98:20:84:6d:16:ac:bc:19:89:0f:13:8c:a7:06:
05:0b:ad:a8:fd:ed:5d:c4:65:63:4d:a6:a1:34:e9:
1e:2e:ba:c2:dc:57:1e:10:43:32:fb:eb:ef:76:ee:
92:09:2d:1d:48:57:1e:d7:af:2a:e9:4e:37:1c:1c:
5e:c3:de:d3:b1:12:e2:9c:6c:7a:4f:ea:ad:89:a3:
15:51:59:10:7a:ca:32:a3:0f:96:18:cf:e6:4f:34:
aa:fe:74:16:39:da:9b:97:0a:87:0c:96:c8:ec:86:
51:36:bd:dd:a4:61:d3:99:68:69:86:73:c8:eb:e6:
25:99:e5:f8:b6:00:74:e2:2a:45:65:53:d2:13:e0:
c2:7a:51:55:ed:6f:5e:04:3a:76:52:44:d7:da:e0:
da:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C1:59:69:40:47:89:C8:15:22:5C:37:46:3A:A7:E1:DB:3F:2E:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/974672-32b4-438f-ab4a-4454c2fcdb68/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/974672-32b4-438f-ab4a-4454c2fcdb68/1/c8FZaUBHicgVIlw3Rjqn4ds_LkU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.240.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:6d:cf:ff:54:9c:30:84:ae:ec:c8:1a:ec:cf:40:d1:61:5f:
be:bd:02:d0:0a:73:5f:f6:7c:71:d7:90:89:5b:21:ef:65:34:
df:e3:4e:90:84:08:79:95:fd:ec:8d:ff:60:16:aa:bc:b7:69:
2a:73:31:50:da:c0:90:df:94:0f:11:87:d9:aa:70:e0:2c:03:
0b:58:98:78:11:32:b4:26:3d:b4:90:b5:04:d4:56:90:12:78:
c8:3d:9a:65:4b:0c:6a:ee:da:93:85:db:a5:52:a0:6f:b7:cb:
20:ca:e4:85:b2:58:af:c9:7c:aa:84:07:94:40:3b:78:04:6f:
7b:ba:11:4e:bf:3f:04:b4:35:6b:03:ff:20:db:20:9f:dd:6e:
cb:ec:49:c2:28:7c:12:a7:d5:f3:f9:d4:10:8d:9a:3f:b0:3b:
36:50:1f:92:e3:9c:ba:15:61:55:40:21:dd:8a:42:13:42:9c:
e0:9b:8f:52:71:66:98:09:e1:e2:83:9a:de:26:d2:e3:a4:3f:
63:e4:7f:7b:47:11:48:1b:c1:e6:46:e2:fa:ed:e5:e6:d9:9d:
36:62:0f:b8:30:54:ac:53:0d:3d:53:c1:d6:b6:d4:9d:56:f5:
f9:1c:c6:bd:27:ee:e2:3d:9c:ff:c2:95:68:69:8e:6c:f4:be:
ab:d8:ae:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:54:30 2024 by rpki-client on console-fra.rpki-client.org