Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
File: c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer (raw, json)
Hash identifier: P6tdmR2gAwDgzfKbIm7Gnko6vWz5054HEgdh3ZFTLq0=
Subject key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4254D6AEE07DF89C5AC0E6A1E12FD7A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.25.184.0/22
IP: 188.213.234.0/23
IP: 188.215.18.0/23
IP: 2a00:8220::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4d:6a:ee:07:df:89:c5:ac:0e:6a:1e:12:fd:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:79:4e:20:5e:77:4f:8c:b6:bd:4c:7f:32:31:
1d:50:b0:18:ab:58:27:9c:ec:7a:69:93:f0:8f:69:
2c:95:2b:71:1b:9f:b6:df:1a:43:00:b9:46:90:96:
db:ca:0e:fa:47:6d:cd:05:0b:ab:96:cd:38:63:80:
e1:1b:c2:93:cb:16:b6:b6:30:67:dd:49:0d:5c:3b:
39:98:56:d7:fb:57:8d:65:03:c9:d7:74:24:1d:be:
0e:1f:ca:c3:fd:f7:85:90:7f:ab:7e:86:df:18:98:
04:28:23:42:43:5f:c2:53:e2:78:d6:4d:c1:5e:12:
82:6d:1a:38:91:cd:56:60:25:92:f4:55:18:eb:7a:
9a:25:23:29:a2:23:39:ba:0b:b7:fc:b5:16:20:4e:
75:c8:f5:db:2e:d4:cc:7a:a6:8b:f2:ef:19:de:52:
88:dd:eb:e9:67:48:2b:c6:e5:98:4e:d7:1c:ec:fa:
c4:f0:9f:24:40:75:8d:81:17:65:74:3f:18:90:07:
bd:c9:bf:96:97:7c:94:41:58:6e:73:e3:8d:51:e6:
dd:03:53:c7:24:54:b2:65:97:4e:42:c8:18:f7:dd:
9b:4e:c1:ba:23:e6:d0:d0:56:3e:97:98:f2:6d:59:
4f:01:f0:69:5f:98:1a:5a:f8:4a:0b:f3:88:f0:36:
45:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.184.0/22
188.213.234.0/23
188.215.18.0/23
IPv6:
2a00:8220::/32
Signature Algorithm: sha256WithRSAEncryption
ab:c8:cd:0e:15:11:68:1d:2c:07:f5:ee:40:72:b4:42:07:c4:
af:8e:0d:27:07:c4:85:9b:cf:53:42:9c:d3:e4:06:31:71:db:
cb:d2:14:b4:44:ed:36:18:a2:b4:21:32:9d:71:2c:3b:8b:4d:
b9:2c:e9:2b:d7:ef:86:07:33:63:12:9f:6a:d9:35:6a:b9:84:
cd:88:e1:37:05:cc:b7:85:07:50:dc:d5:59:a5:d5:25:8f:b6:
30:ee:aa:cd:96:b6:16:44:9b:ea:db:c7:3a:ee:c9:1d:5d:a6:
43:74:51:7b:83:b0:06:42:30:12:de:fd:ce:ea:62:9e:1b:97:
76:f3:c0:06:7f:fd:05:3e:0a:c4:89:fb:58:4f:79:79:1f:e1:
ca:9a:68:6a:d9:7c:e0:92:c3:63:7c:3e:68:f7:02:00:48:74:
57:8f:9c:97:d5:84:f1:fa:39:ab:c3:17:f1:b6:82:37:dd:c7:
91:59:72:35:2f:4a:9c:40:2a:fc:8e:86:77:b3:fe:99:4b:de:
1b:19:a6:b8:0d:ef:f5:ca:21:d0:a0:b8:55:b1:77:a3:0b:79:
75:f3:ce:35:d9:fc:fe:ad:f2:2f:ba:62:9a:f6:aa:5d:b7:24:
8d:db:e8:55:d9:66:6b:c3:8c:fb:3e:bf:30:ea:92:d6:78:d4:
01:b0:51:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:20:32 2024 by rpki-client on console-ams.rpki-client.org