Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
File: g4heOKx3ysBEgptTyzslq-Yen2Q.cer (raw, json)
Hash identifier: 813w9Hk1ntwU+iA09LzpL4hD605Cp+/Y1FrTQ0DgE2M=
Subject key identifier: 83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64AFC77E88F2E6CDB8956A3798F9721
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.142.129.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:fc:77:e8:8f:2e:6c:db:89:56:a3:79:8f:97:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:06:4b:89:95:28:39:0f:72:95:95:b3:f4:
b5:39:d5:66:df:30:07:7e:46:ea:53:c1:79:be:c3:
cd:80:84:b3:58:53:4b:1a:08:63:09:26:87:2e:a5:
25:a4:ac:77:26:2a:68:5b:54:7d:d2:05:89:72:ef:
5f:8c:f5:e3:31:c5:5a:02:2c:6b:c6:50:58:85:d7:
41:76:45:0c:fb:9d:26:9a:b8:fd:2b:db:01:ca:91:
78:bb:dd:0e:c1:a2:66:92:fc:74:21:19:b6:51:c1:
01:ee:9f:04:cf:1a:3d:6f:cb:d5:8f:77:25:00:d1:
0e:01:54:44:22:bb:59:88:0b:d9:c5:bf:28:f9:1b:
da:c7:46:65:cc:34:31:90:42:5c:7a:9f:19:37:b3:
4d:d5:6b:31:25:25:9f:e0:6a:74:6f:5d:ee:31:cd:
22:f5:7b:ee:00:35:4a:54:75:b9:ed:1b:9e:0f:2e:
7e:26:80:f0:ae:ef:5a:e5:98:af:15:19:3c:fd:0d:
6e:98:a9:6a:56:72:e0:50:11:26:54:c4:31:cb:f8:
a1:03:c2:bc:45:7d:0e:b5:eb:77:25:2f:b8:62:a0:
e3:87:df:3a:59:02:5c:f8:1e:40:b4:45:ff:2a:4b:
61:e2:75:78:5d:92:3f:66:02:e4:db:ea:9c:cf:d3:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.129.0/24
Signature Algorithm: sha256WithRSAEncryption
40:43:7f:8f:71:6c:6c:9f:18:44:51:51:45:d3:65:a4:6e:96:
7c:d5:d5:8c:d3:61:7f:40:08:dd:80:c6:fb:28:ed:ec:68:d3:
56:20:6f:85:63:49:84:c5:87:cf:2b:bf:1a:b0:c8:f0:4d:ea:
70:24:a8:bd:b7:bc:cd:ff:4d:1d:9e:e9:36:76:69:a6:89:b3:
27:9e:1a:ff:d7:71:0f:4d:97:bf:47:0a:4d:10:91:bc:ba:36:
cf:b6:66:49:da:61:ec:a7:6a:a9:28:90:2d:b1:11:90:44:47:
e7:f0:bc:01:f9:24:1e:a9:50:ce:43:1b:d1:a4:1a:7f:08:ec:
58:69:c6:37:7c:46:58:f8:47:5f:19:c9:82:b3:4e:96:13:ca:
fd:df:08:83:8f:6d:70:e2:63:e5:d9:1f:09:f2:b1:1a:a1:65:
19:48:b5:7c:9b:8c:f6:d3:b7:8f:77:60:a6:fa:02:6b:98:f8:
ad:40:73:ba:f5:68:9d:af:76:d4:07:8f:65:ab:1c:9c:f4:59:
d0:b8:9f:7d:3a:b7:19:4b:06:f1:e7:30:0c:6f:59:1f:6c:dc:
aa:2b:4e:d0:f0:ce:f7:36:12:33:33:9e:75:6c:8e:a8:65:e5:
2b:d6:d0:2e:84:d1:cd:3d:0b:10:b7:4e:0a:9a:91:e7:3a:ea:
fd:5e:c4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:10:26 2024 by rpki-client on console-fra.rpki-client.org