Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
File: fciWyziZxbZIjRxGU_ruSyMVHx8.cer (raw, json)
Hash identifier: grfkHGIwlAFOROWvGEThVNKbWhpxInPxMu2q8FzpziU=
Subject key identifier: 7D:C8:96:CB:38:99:C5:B6:48:8D:1C:46:53:FA:EE:4B:23:15:1F:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B2F1958C747CA98BF5AB37DDA9C76
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 31.15.104.0/21
IP: 31.47.216.0/21
IP: 82.113.160.0/19
IP: 93.94.72.0/21
IP: 185.153.100.0/22
IP: 188.92.88.0/21
IP: 194.176.64.0/19
IP: 195.97.192.0/18
IP: 213.131.96.0/19
IP: 217.22.144.0/20
IP: 2001:4dc0::/32
IP: 2a02:2b38::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:2f:19:58:c7:47:ca:98:bf:5a:b3:7d:da:9c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dc896cb3899c5b6488d1c4653faee4b23151f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:d4:c6:70:04:9d:f6:36:59:19:77:b1:1f:
83:e4:16:75:bc:60:8f:79:bb:c3:6f:e0:c7:ba:ee:
9c:74:a7:04:33:5e:74:85:8e:bd:98:5d:d8:d2:91:
67:aa:2c:60:51:c8:68:36:0d:de:15:de:ce:6f:6b:
a9:13:60:17:3b:b4:46:b6:80:50:79:ae:79:72:1b:
1e:28:e0:57:78:28:dc:ca:34:35:27:d5:5b:c1:e3:
2f:a4:b8:8f:71:42:1c:ae:09:f2:2c:6d:e0:66:98:
ee:2c:47:ff:05:e6:25:05:55:af:67:ef:7a:5e:f0:
67:70:1f:22:29:92:ff:6e:f7:8b:b3:96:41:d6:db:
4a:83:ba:b9:89:f9:bc:6e:52:3f:28:7b:4f:8c:78:
7e:9a:85:3a:44:8a:39:0c:a0:f8:e8:82:be:5d:49:
c7:cc:11:a7:53:4b:d3:7e:81:c3:14:83:b6:0a:15:
6a:d4:0e:f1:9a:5c:2c:b7:e0:c2:c2:e9:89:eb:06:
a2:56:b5:e4:15:b0:cf:9f:61:ad:24:2c:35:86:1a:
46:59:9e:bf:58:72:02:09:09:8e:97:39:77:e0:7b:
2c:45:1e:0c:61:09:9b:fe:bb:4a:b7:8c:1c:45:4a:
b5:4e:6f:29:96:0b:9e:3d:c5:bd:bf:25:36:0f:20:
3d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C8:96:CB:38:99:C5:B6:48:8D:1C:46:53:FA:EE:4B:23:15:1F:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.104.0/21
31.47.216.0/21
82.113.160.0/19
93.94.72.0/21
185.153.100.0/22
188.92.88.0/21
194.176.64.0/19
195.97.192.0/18
213.131.96.0/19
217.22.144.0/20
IPv6:
2001:4dc0::/32
2a02:2b38::/32
Signature Algorithm: sha256WithRSAEncryption
6f:c6:c5:23:dc:63:9c:b4:a3:38:6a:10:12:34:55:99:4b:21:
3a:21:5d:8f:8a:1e:ef:3b:9c:9a:c8:b4:40:4c:ee:78:7b:a9:
5c:90:42:bf:9b:4f:1d:09:7c:1a:ef:79:4e:e8:bb:49:18:73:
11:70:78:4d:9b:4f:ea:33:d6:95:c2:c9:3d:ff:c0:d3:9e:05:
9c:a3:85:75:99:2e:84:45:5f:b7:fa:dd:aa:f7:89:75:7b:0e:
b9:16:c7:8c:b4:d1:ba:7c:8c:83:ee:48:4f:e4:20:b7:2b:d6:
ac:a1:2c:e3:56:55:46:1b:59:e1:e8:0d:32:99:df:b0:38:fd:
02:9d:02:12:7c:ce:f1:76:72:56:8c:d7:f2:71:86:15:ad:2d:
69:63:ba:57:41:49:cd:e8:b8:a6:41:df:4d:3d:ed:c7:b5:33:
b8:d5:63:62:79:79:e6:c5:9c:5b:e1:ee:23:45:8c:82:d1:a0:
4c:6b:8e:af:27:b1:08:19:79:ee:0b:f9:93:0c:6e:f2:9c:70:
b0:aa:35:b9:82:98:d9:31:41:3a:15:45:e5:fa:0d:36:01:48:
a0:de:0b:4f:b1:f6:26:20:44:30:f8:29:5d:98:66:1b:c2:34:
d5:b8:76:b2:ec:1a:8e:f9:09:e2:33:a8:82:41:08:cc:d7:ad:
e6:11:42:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:09:17 2024 by rpki-client on console-fra.rpki-client.org