Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer (raw, json)
Hash identifier: rYZpr3Ao4dONXHoEbj/D7VDnKUDg0N7FZQB41Uq+2JE=
Subject key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94C0CA6CC6083B83846BAF9CB873B60
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:30:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.226.216.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:0c:a6:cc:60:83:b8:38:46:ba:f9:cb:87:3b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=837e177f76663166c75190e2d209335a6aae5ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e5:cb:fa:9b:37:a9:8b:6c:1d:d3:db:ac:87:
8e:67:14:71:17:72:16:bb:21:5a:95:0e:3f:24:d8:
0a:e0:25:94:fb:59:d4:09:1f:53:1e:52:9e:15:4b:
2a:0c:b3:2d:62:b3:dc:7c:5e:95:a8:69:bc:55:27:
7a:94:4e:1c:48:8e:49:8a:0f:3d:1d:78:de:c1:a1:
77:80:37:65:f4:31:76:3d:2b:b0:fa:6e:ee:64:4d:
c1:62:4f:3c:e9:d1:80:9c:41:c4:ce:77:0b:90:03:
17:46:b2:d7:b8:bb:b6:1d:de:41:67:bf:c6:ca:a2:
3f:04:dc:29:5f:09:7d:b5:b0:96:0c:0f:2e:df:82:
9c:3c:0f:b6:e8:3e:f1:93:93:5b:fd:55:48:62:6d:
93:5a:03:ff:6d:d9:b6:75:c5:3b:02:04:c2:bb:a0:
38:b4:93:7c:de:e2:16:8d:b3:f3:08:49:fd:9d:21:
9c:ba:95:87:73:c1:b6:61:91:6f:58:0e:93:5c:7e:
fb:79:b2:d0:82:af:80:74:bf:c3:20:a9:4e:9c:2d:
6c:ce:c9:8d:ed:dc:87:e6:0b:8a:f0:59:44:8d:d8:
31:37:48:ce:52:f0:e7:c8:50:2b:79:1c:61:49:45:
07:96:9e:1e:a4:10:f6:ec:6d:aa:af:f7:49:8a:29:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.216.0/22
Signature Algorithm: sha256WithRSAEncryption
59:e2:61:8e:b0:96:b9:90:94:6e:c9:cf:7a:f2:3a:26:07:e4:
9d:4a:8f:a8:fe:eb:89:06:a5:fa:d1:b3:3b:e2:c2:4a:ec:f5:
60:6d:49:c8:7e:1d:70:ae:35:b6:55:97:d7:a6:7b:6f:c0:22:
07:6d:b1:21:47:b8:62:0f:51:79:4b:a8:3f:a3:da:f0:53:29:
fa:e6:46:3f:e1:8d:8b:5a:50:98:64:af:f1:52:fb:f3:c6:73:
b0:66:2e:f9:f3:88:44:83:9a:3b:01:f7:51:b4:72:c2:1e:9d:
fc:33:ef:78:93:87:5e:03:ea:de:9a:66:60:81:96:d1:9a:6c:
c5:8b:0e:1f:ae:c8:2e:0e:97:28:3c:ca:7d:e6:98:f2:c9:5e:
d5:1a:b8:41:22:d0:ad:d6:e1:58:13:f2:fe:a5:89:8d:dd:b5:
a5:d9:3d:8f:db:e2:8c:8e:f3:6a:af:28:ac:65:4b:35:6b:18:
3b:95:a3:e1:4a:7d:38:7e:49:c6:27:4c:ff:4d:8d:37:33:a3:
7d:fc:34:87:a5:af:c6:f4:4c:7b:a8:9e:3d:0c:62:9c:e5:91:
fb:f8:ce:0b:83:2d:45:0c:d4:48:73:51:e6:16:3a:f6:42:1f:
03:bb:1c:e6:1b:e1:cf:63:91:6f:6d:82:80:de:15:6d:9e:c0:
40:b7:0e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:10:25 2024 by rpki-client on console-fra.rpki-client.org