Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.cer (raw, json)
Hash identifier: ElYqn1tnXNqzenHMZUvbfcKSlMDath8nAIV+t104kcE=
Subject key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E199DD491168569E8F40302A24C88
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 176.67.176.0/21
IP: 185.39.236.0/22
IP: 2a01:5380::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:19:9d:d4:91:16:85:69:e8:f4:03:02:a2:4c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:76:bb:91:84:1e:ba:59:81:92:93:fa:3f:
dc:a0:4d:6f:c1:82:97:00:90:3b:2b:50:8c:b8:b5:
41:23:b1:52:59:7b:73:90:29:e0:a4:ee:42:32:02:
6c:5f:24:68:ef:c7:57:d7:b9:05:51:1b:36:f0:e8:
bb:dd:35:e9:24:ff:ce:b3:55:9e:ec:5e:af:dd:25:
99:a2:e7:46:4a:7a:ec:ef:95:a5:55:12:ce:8f:db:
c1:0d:94:80:a6:e8:29:8e:2e:de:40:de:94:47:5e:
59:af:99:87:fa:c6:4d:a2:b5:a8:97:89:75:55:2c:
97:6d:ec:2f:7b:93:1f:d5:24:9b:5b:0a:5f:64:4c:
3e:05:b5:4a:1e:58:10:76:85:25:a6:97:d6:51:d8:
00:f7:dd:98:49:cb:68:e1:b0:76:1e:0b:09:54:28:
06:38:53:45:2c:6e:8a:f9:85:46:c8:cd:9d:12:53:
45:cb:50:a3:cf:08:40:10:ab:55:5e:1d:61:d9:57:
85:11:46:3a:39:78:e1:74:82:66:24:64:ef:b8:ed:
d3:25:66:7f:af:0d:4f:8a:06:bd:f1:3b:2c:ad:f7:
e9:f0:65:da:34:ea:99:d4:b7:97:a8:bc:1f:a5:82:
96:3f:6d:08:fe:d8:80:b5:96:21:af:42:fe:10:14:
20:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.67.176.0/21
185.39.236.0/22
IPv6:
2a01:5380::/32
Signature Algorithm: sha256WithRSAEncryption
43:61:4e:7b:58:a6:a0:bb:e6:10:47:ca:c0:fb:fd:68:7a:4e:
48:1f:25:50:18:9c:c6:00:76:bb:fc:44:41:aa:e4:0b:23:54:
49:a0:d9:6f:5f:1e:75:d0:ca:52:d0:2f:cf:c1:36:10:a3:22:
43:e4:7a:dd:d9:e0:98:10:05:56:4e:06:5d:89:7c:3d:91:b2:
18:54:45:6d:4e:bb:da:27:c8:ad:27:a7:50:71:a5:74:88:ee:
57:f6:64:ff:33:58:bd:58:28:54:2b:9a:03:af:f6:d5:36:69:
df:d8:ce:32:50:8d:48:6d:4e:51:74:87:a0:c6:2d:dd:7d:b5:
a6:50:69:b2:36:1e:36:ef:9e:f4:ab:56:f5:7b:78:aa:76:b2:
de:81:88:a1:e7:24:12:9e:f9:cb:b3:90:b7:ce:80:3c:7e:73:
a6:03:53:0a:5a:18:39:2e:76:c8:15:0c:f5:59:24:88:f2:98:
75:b3:66:4a:86:32:54:77:f0:8c:27:2b:7e:b3:67:7c:f8:48:
b6:da:4a:16:d0:30:3a:73:d6:bb:b0:dc:08:28:4a:76:09:8a:
80:b9:2e:81:7e:66:8c:59:85:b6:bd:88:d1:aa:da:78:85:e6:
0f:e2:1a:2e:bb:aa:9f:2a:cf:2b:5a:31:ac:e3:d3:1a:1e:15:
60:dc:f1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:32:57 2024 by rpki-client on console-fra.rpki-client.org