Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
File: dT1Hbblt4eWGIxGacLnXsAtnbaA.cer (raw, json)
Hash identifier: 1P4CdGNI3pooK70as30he5lmcGZXC5rdrlzAA3AcmS4=
Subject key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4250DACE420895E191C2DFEE160D1CE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 20980
IP: 193.108.8.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:0d:ac:e4:20:89:5e:19:1c:2d:fe:e1:60:d1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=753d476db96de1e58623119a70b9d7b00b676da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:38:12:67:1f:48:81:c7:4c:3d:a5:c6:8c:
9a:11:69:32:f3:33:5e:be:e4:f3:f4:c7:ac:2d:1e:
31:92:2a:5c:a4:ad:e6:4e:9c:6a:9d:6d:24:10:02:
db:8e:2d:66:12:39:7a:fd:35:5b:d1:08:82:b3:c4:
f5:33:20:3d:f0:3a:5f:f8:fb:dd:75:22:1f:ee:b2:
e5:bc:78:05:d6:59:2b:2d:0b:69:b8:e6:8e:ca:67:
e4:8d:c4:1f:55:e1:6f:6d:91:32:20:74:89:c9:b7:
a0:cd:06:fa:77:ad:21:6c:cc:af:3c:26:50:26:d9:
a4:23:3b:97:72:ba:e2:03:94:3f:e4:0b:df:e9:07:
f9:3a:87:12:47:bc:0f:48:b3:22:fc:1b:a7:37:20:
94:0b:e4:7e:a2:55:56:22:56:0f:8f:7b:0b:13:95:
10:77:f9:3a:dd:dd:bc:ce:d3:7a:83:db:d1:82:db:
2a:81:3a:8b:6d:55:e8:8a:f9:2d:4b:2f:12:23:69:
1f:8d:b5:5f:7f:f6:01:dd:e6:61:94:04:72:7c:ae:
10:49:82:de:1c:d9:70:26:ae:4a:02:57:56:4f:fc:
af:71:4d:70:45:9d:6c:40:76:b3:98:63:6a:41:94:
f7:89:ba:4a:f2:07:f5:f6:15:d7:f0:80:d1:af:a6:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.8.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20980
Signature Algorithm: sha256WithRSAEncryption
88:59:ba:d6:33:e1:7f:d7:ee:62:37:56:76:35:1a:76:19:c2:
71:e3:ef:a4:a6:e4:92:83:23:f1:3d:f0:f1:40:46:15:c2:de:
60:0e:6e:f9:dc:76:e7:da:f3:83:a8:ba:51:0b:40:2f:71:25:
26:9d:9c:b6:04:9d:96:10:53:5f:41:34:5b:f5:44:aa:78:23:
e8:1b:fa:42:29:be:f7:c4:e1:27:1b:41:6d:3d:d9:ee:68:ce:
f3:8e:d4:4e:fa:c8:13:24:55:f6:78:44:2a:74:e3:97:39:0e:
f8:be:38:5f:4e:c8:03:66:cb:2e:45:4f:6a:ef:10:f8:2c:db:
ff:be:29:80:0a:a5:db:6a:44:5f:9e:c9:48:2c:0b:af:91:5f:
e5:65:7f:ce:23:6c:b2:1c:71:ce:9e:c7:5a:93:cb:89:85:1d:
b2:39:99:60:26:d6:33:4b:03:d1:d9:d8:a6:12:61:84:c6:7c:
7b:32:6f:dd:8e:3f:7b:f4:d7:3b:4d:6f:a8:0b:21:39:31:91:
43:39:5b:91:1a:af:18:10:35:1a:9e:a4:62:f4:b3:8a:21:f4:
43:17:dc:03:8b:d6:0b:3a:78:c3:5a:e4:e2:f2:69:26:58:84:
a6:99:5b:f9:3f:19:ba:e8:77:06:ff:e0:b1:55:c0:d7:71:52:
fc:0d:3f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:42:14 2024 by rpki-client on console-fra.rpki-client.org