Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
File: d8pTqKWgOwVcs_NA_L64XXrUh6g.cer (raw, json)
Hash identifier: I257w9IheKo9Bdz8OL3IsO44HdXgQvnPlG78so7tmaU=
Subject key identifier: 77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E2FB000466B35ACEB8202D97FB4CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 188.94.232.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:2f:b0:00:46:6b:35:ac:eb:82:02:d9:7f:b4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:cd:de:e6:ca:e3:10:49:12:51:e0:0e:77:
24:f1:c0:97:cb:37:57:10:58:3b:8a:70:0f:dc:7c:
c5:94:33:ae:ff:90:d4:c3:dc:b9:78:46:ed:39:63:
b3:27:83:84:a1:42:b0:a0:1d:41:c5:20:49:51:ac:
88:2d:68:04:23:c9:5a:99:6b:7e:eb:ae:a8:a8:97:
08:81:85:2c:b6:ff:47:9b:68:ae:ab:4d:11:ee:72:
ce:85:a1:53:16:f1:a4:94:a8:51:bd:37:aa:47:5e:
65:e6:e8:21:a2:23:9a:99:c8:97:b4:ed:ea:98:58:
f4:89:c8:2e:ef:53:4d:23:a3:09:c2:3c:35:26:9d:
50:0a:01:ec:f2:a3:80:33:9a:55:4a:59:e2:df:3c:
64:31:e5:c0:71:91:e8:a2:1d:c8:d5:35:b0:4a:13:
ec:b9:61:39:42:30:47:cb:9e:a6:87:05:1d:31:3c:
14:29:28:91:e1:7a:e1:f9:62:54:37:f8:00:f0:4d:
4b:e7:eb:e3:1a:4b:af:80:f3:0e:5d:25:fe:96:21:
aa:74:bf:d9:f1:22:1f:cd:41:ce:1c:37:de:42:b4:
eb:c0:6e:73:e6:93:80:ef:55:09:86:0f:7e:08:01:
56:cf:9f:9c:72:60:ab:1c:25:da:89:2d:02:cc:79:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.232.0/21
Signature Algorithm: sha256WithRSAEncryption
89:0d:68:9a:ed:b1:44:59:66:39:ca:e2:98:ff:62:14:8a:05:
bc:16:ab:c5:83:96:27:75:20:4a:8a:24:9f:f6:5a:cf:3c:e4:
b1:2d:fd:c9:1e:3a:e3:1e:fa:ea:20:6d:0c:1a:6b:3b:68:76:
0c:30:1c:0a:fc:ac:72:59:45:b9:0c:ca:d9:ac:72:a4:ab:56:
74:df:7a:18:70:38:d2:44:23:18:48:a0:e9:e6:eb:43:d3:de:
be:3b:52:8d:ef:8f:91:ad:a2:ad:a2:e0:fc:37:84:63:59:28:
59:5b:74:95:4c:12:6b:d6:ba:4f:65:76:83:15:a2:1a:b5:6a:
79:d5:9f:3f:89:b4:96:91:13:7e:f2:f4:ef:2c:c5:47:fc:29:
1f:e0:c2:9c:97:57:d4:97:15:f4:61:eb:f3:1c:2f:4a:de:dc:
d9:34:df:3a:66:33:88:e8:1d:ff:37:0b:51:c2:f3:eb:99:c1:
f6:f0:3a:f7:d5:65:26:53:43:a1:b1:04:6b:4a:0c:47:5c:8e:
10:75:fd:a6:2e:03:b4:41:a0:59:78:cb:60:f3:c7:b7:31:6e:
5d:8c:18:a2:ce:f6:1d:94:39:c2:78:02:da:48:13:c2:1b:79:
20:d6:bb:8c:15:c1:44:b7:f6:ca:32:37:ee:26:2f:e4:09:1d:
bb:88:2d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:23:25 2024 by rpki-client on console-fra.rpki-client.org