Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
File: g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer (raw, json)
Hash identifier: pqalYbwXikhOSbs7r6uwuVlBlEFpxjk52pyJfVLILqE=
Subject key identifier: 83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC38BCDBC7E1713FFE3552B2BD2726
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.7.12.0/22
IP: 2a02:d340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:38:bc:db:c7:e1:71:3f:fe:35:52:b2:bd:27:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=838c4f810d7a20a783a4fab1c034467b825051b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:81:a1:af:ec:79:0a:ef:bf:43:20:1c:06:fc:
a0:46:bb:63:13:17:d8:c7:3d:1f:8e:85:44:12:a1:
9f:b6:65:71:98:c4:f0:20:24:e5:9c:87:81:44:98:
26:0f:2a:a4:da:78:37:51:0c:a8:4f:4c:86:dd:be:
6f:47:79:21:a5:ab:dc:85:b2:e7:04:94:10:66:80:
69:1e:83:c4:87:ab:9a:9f:0b:0b:d8:32:0c:ef:c6:
33:84:83:1a:bd:5e:6f:f8:88:98:d6:9e:c8:85:14:
84:e8:d9:68:42:35:62:f4:35:a5:ad:16:11:f8:eb:
16:87:7c:cd:76:21:3c:02:8a:67:3f:d4:14:81:04:
ea:10:c1:94:3e:6f:40:a1:c6:87:0a:6d:15:f7:d4:
9a:5a:74:21:3f:11:a3:2b:e0:55:84:8a:f7:b6:ec:
4f:a3:a4:12:2d:74:2f:fc:db:62:ce:d3:fb:e0:ce:
b3:13:a6:2a:f5:d1:e6:2f:18:4f:d5:57:3e:1a:56:
23:d0:58:71:b7:ba:64:77:03:d6:27:52:7a:83:75:
e2:c6:7c:36:31:d5:0b:bd:17:50:cc:f4:51:b5:65:
8e:87:b8:59:40:f4:e5:0f:1e:0c:0b:55:04:2c:54:
eb:03:62:ff:7f:34:69:01:51:05:85:c9:b1:05:18:
67:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.12.0/22
IPv6:
2a02:d340::/29
Signature Algorithm: sha256WithRSAEncryption
4d:92:f2:7f:39:cc:23:6f:3f:90:73:52:63:73:30:d4:08:d9:
ff:aa:20:93:55:5e:01:83:d8:eb:10:91:7e:2f:f1:91:1f:0b:
2f:a5:e0:70:09:05:18:c9:82:7b:d2:21:53:f8:6b:a3:46:a5:
5b:ac:66:00:9f:4a:88:0f:a6:82:ec:aa:26:5c:09:77:8a:81:
5e:59:1d:29:16:6f:8f:33:60:4b:a1:52:f8:3c:a3:66:7d:e9:
31:56:2e:a2:85:e4:bc:86:82:d9:af:06:82:53:e4:31:67:19:
1d:3a:1c:49:21:bc:bb:0a:15:aa:e3:44:94:dc:d7:c0:b3:05:
c6:33:39:2a:e9:0c:d1:70:fa:a8:84:78:8a:12:59:93:fe:99:
73:b8:76:de:3e:c3:20:81:0c:10:4f:0f:e3:3a:b1:ae:11:fa:
8a:46:37:8c:f9:cc:27:ff:96:a2:27:80:d1:cb:60:78:a8:0d:
a5:d0:e3:af:13:7f:1f:6e:8c:a6:87:fb:e5:c2:91:f0:63:bf:
65:26:e7:59:03:f0:91:4d:56:39:3c:4c:31:11:55:ba:69:0a:
f3:73:a1:8e:9e:8d:87:13:c3:fd:d3:bc:ed:fc:91:05:df:af:
c5:dc:74:47:1d:00:b9:13:ee:0d:3c:9e:99:9e:70:b7:57:9c:
06:36:b9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:35:02 2024 by rpki-client on console-fra.rpki-client.org