Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
File: djLJDvGdK9b2aKSCbi0NFWNelH0.cer (raw, json)
Hash identifier: CzFY8FXRI1/9HO0hY19wt01GKckYF732zxoPNBaurqI=
Subject key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B71879A921702C79F06B2B64523257
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.220.172.0/22
IP: 2a02:f5c0::/29
IP: 2a0c:5e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:18:79:a9:21:70:2c:79:f0:6b:2b:64:52:32:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:b6:6a:a2:ac:45:bc:2e:7d:02:5a:a7:2f:
25:4e:18:46:58:79:d7:aa:a3:98:f9:fd:5d:ab:d6:
1a:2c:e4:40:4c:24:8d:2b:99:f7:a4:5e:76:46:8f:
75:c7:0c:94:af:0c:2b:9e:0b:6a:37:32:a6:3b:c5:
c9:94:9a:00:14:29:57:b4:84:76:92:14:cb:9a:c9:
ad:5b:56:53:c8:38:d1:88:de:13:f8:f7:f2:7d:4f:
84:d9:ec:be:ec:9f:c2:83:fc:76:48:4f:b8:e9:4d:
16:f4:cb:8f:09:36:4c:7d:78:b4:86:8e:3d:68:57:
75:2d:e7:13:7a:74:6a:17:25:29:00:0b:eb:96:39:
0f:02:68:2a:0d:69:09:d5:61:8a:f2:19:65:94:fc:
bc:36:11:d2:46:33:52:13:65:3c:ec:fa:d7:c9:39:
ae:d1:75:f2:97:4e:41:2b:85:9d:04:7a:38:6c:73:
ef:aa:b8:d6:fa:70:ac:19:6d:61:31:d1:c0:8e:0f:
a1:e4:ad:99:ff:cc:9c:e0:a5:ff:67:e0:f6:16:d8:
5c:c0:9d:7b:d4:3e:dc:a9:65:ab:97:6e:6d:28:36:
6a:90:05:83:b1:8e:4d:f7:bb:74:16:cb:5a:ab:e7:
39:f0:99:7d:72:c9:1f:bd:f2:ab:56:a9:14:bc:f2:
6c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.172.0/22
IPv6:
2a02:f5c0::/29
2a0c:5e40::/29
Signature Algorithm: sha256WithRSAEncryption
71:cc:d7:51:6d:82:2b:96:f4:8a:08:47:4e:6e:b8:6f:5f:a0:
d9:16:6e:35:23:3d:1f:b3:40:78:10:35:8d:83:b9:51:58:c2:
f8:f6:cf:75:02:9d:e6:ee:66:2b:f0:03:4e:89:31:9e:6a:8d:
4e:a5:4e:ed:32:9b:f6:64:5d:2c:2b:35:49:61:5a:bf:46:d1:
6a:a2:84:c3:8c:47:cb:5c:e9:d6:45:96:ec:43:7e:d4:8e:df:
ec:8d:eb:f7:ff:17:8e:cf:1a:ae:01:28:ac:a1:a9:d4:c3:29:
3f:ac:ed:2b:c4:b6:1d:83:58:64:2e:15:39:17:58:31:b5:98:
b6:39:ad:62:0f:cc:14:12:c7:0b:1d:df:f8:c8:1c:65:39:2c:
9f:ed:1f:d6:f4:1e:14:20:6e:0c:22:e2:e5:2c:ad:e3:ea:a4:
a3:0e:0c:a0:72:c7:4d:19:77:d6:a1:34:ee:6f:de:f4:34:bc:
96:df:d5:9b:7f:67:96:c3:26:d0:70:fe:e1:a6:bd:5e:49:2c:
56:40:46:27:5c:8a:99:ce:27:42:59:d8:62:cd:92:a2:f4:09:
49:ee:55:c8:a9:cb:2c:2a:2b:19:35:34:d6:29:5b:c9:c1:fb:
67:8e:72:cc:2d:87:ad:28:20:3b:57:e5:1e:0f:30:2f:8a:7d:
bc:78:89:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:41:38 2024 by rpki-client on console-fra.rpki-client.org