Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
File: fsZaHc-CJefxC-IN3eHiFugAtnw.cer (raw, json)
Hash identifier: fOPr9tXdEa2x3k8E++Y3svNjyL1WZ8gWIsimFI+TNKs=
Subject key identifier: 7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42447EFFED34C754A7E4DEBDF3D4DD4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.11.128.0/17
IP: 5.24.0.0/14
IP: 31.140.0.0/14
IP: 77.67.128.0/17
IP: 86.108.128.0/17
IP: 141.196.0.0/16
IP: 176.89.0.0 -- 176.91.255.255
IP: 176.227.0.0/17
IP: 176.237.0.0 -- 176.239.255.255
IP: 178.240.0.0/13
IP: 188.56.0.0/14
IP: 213.43.0.0/16
IP: 2a02:4e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:47:ef:fe:d3:4c:75:4a:7e:4d:eb:df:3d:4d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:85:a9:e3:f8:e6:2a:8e:51:aa:b9:a0:c7:
36:5b:50:b4:ca:0d:66:21:0b:5e:e7:b1:90:77:36:
26:64:8a:f1:a8:40:ef:c8:c4:fd:c1:7c:72:66:a0:
a1:44:14:45:bb:92:c9:07:b0:b4:65:43:cd:8e:df:
89:46:8e:21:b1:b6:97:42:a0:61:06:cc:bb:3b:d9:
ab:b6:1f:d7:6c:e6:f8:8b:15:cf:f1:9a:c5:c3:ca:
d7:ea:d7:41:cc:e2:68:b5:ba:de:24:6f:f2:e5:44:
c4:cd:59:29:d3:3b:92:2b:24:14:47:93:ff:3a:2f:
55:9e:a2:bd:e5:b3:4b:8a:17:ef:03:72:58:f7:0e:
b9:f9:fc:ce:3d:dc:da:bf:0d:b5:06:ec:fb:cf:eb:
74:a7:1e:b6:15:e1:da:56:f5:49:2a:60:a1:4c:c3:
c0:6d:d6:8e:54:38:34:4c:0e:1b:e4:ed:b1:d0:71:
a8:2b:4d:5a:0a:dd:a1:8c:88:8f:22:e1:6a:ea:2a:
43:bb:aa:9b:16:0d:f5:2d:51:c7:42:dd:62:99:ec:
00:d6:7d:58:5c:91:f9:71:f4:d0:71:c1:46:3f:fc:
ec:df:9b:f2:1c:86:cf:17:1d:31:41:87:ce:6b:b8:
97:b2:74:f6:54:9d:8a:51:dc:ed:6e:4c:58:d5:1b:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.128.0/17
5.24.0.0/14
31.140.0.0/14
77.67.128.0/17
86.108.128.0/17
141.196.0.0/16
176.89.0.0-176.91.255.255
176.227.0.0/17
176.237.0.0-176.239.255.255
178.240.0.0/13
188.56.0.0/14
213.43.0.0/16
IPv6:
2a02:4e0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:73:bd:aa:90:10:e9:d7:26:5e:af:80:e6:98:5f:1c:cd:d6:
53:63:74:00:7f:57:ce:de:b2:d5:00:8c:65:a5:d8:74:58:f7:
11:e4:e5:9f:1c:7a:43:7f:41:6f:0c:e2:d8:53:a8:01:17:25:
50:b4:35:07:00:bc:b5:f8:4f:fc:fb:fe:73:07:0c:5f:df:bf:
e5:e1:9b:a0:f3:cb:95:77:ef:e0:a8:8d:17:67:db:f9:1b:dd:
e4:b2:cb:7b:cc:36:9d:7d:90:ef:32:d5:68:ff:bf:2a:cb:ce:
68:7a:41:c6:7d:e3:c5:82:b8:52:a2:5b:13:3a:d0:36:82:9c:
b0:90:40:18:d3:b1:57:5a:b3:27:18:1d:f7:0d:da:bb:5f:78:
ec:b7:12:fc:04:ed:c1:16:61:85:c1:cd:c6:8b:e6:9b:dd:09:
93:63:05:09:a0:66:32:da:c7:2e:c1:1f:23:1c:ba:23:dd:7c:
fe:eb:d9:7a:fa:17:28:ef:81:f2:63:40:ef:94:f6:2f:87:28:
47:04:b6:6a:3b:f6:7c:83:f3:d3:1b:24:1a:a0:35:55:90:e0:
5c:4d:cd:fb:f1:3c:19:22:ce:d4:c1:fd:aa:1d:74:2a:af:d9:
83:16:b1:97:8e:be:41:8b:1c:65:5c:5f:8f:7c:12:6b:0d:f7:
f0:0c:ff:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:10:14 2024 by rpki-client on console-fra.rpki-client.org