Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g5wgbvXcxDdwmDpI4Emq7D8LT-w.cer
File: g5wgbvXcxDdwmDpI4Emq7D8LT-w.cer (raw, json)
Hash identifier: m+4y6uFiMuO648GBuz0GrkH7ZEcV1U3ztV4XkO1YkAA=
Subject key identifier: 83:9C:20:6E:F5:DC:C4:37:70:98:3A:48:E0:49:AA:EC:3F:0B:4F:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC425539B4187D4A0EFD57AED734E4686
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/g5wgbvXcxDdwmDpI4Emq7D8LT-w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.217.223.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:53:9b:41:87:d4:a0:ef:d5:7a:ed:73:4e:46:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=839c206ef5dcc43770983a48e049aaec3f0b4fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4c:b9:f0:39:77:79:f0:e7:4f:a2:51:63:96:
b6:b1:27:b8:ce:60:d5:61:63:65:7c:af:ca:5e:d8:
14:e4:e1:2b:40:26:b8:96:8a:ff:ca:1b:21:57:3b:
b2:85:00:4b:63:59:be:78:67:a2:b9:71:40:ad:b6:
3e:a9:9a:96:12:39:50:20:02:7e:83:61:61:1b:d8:
b0:9f:7b:e0:50:e2:b5:34:68:d8:92:81:10:ae:55:
04:25:02:95:a6:5c:85:4e:63:da:0c:82:3d:53:e5:
a3:20:73:c0:eb:3d:59:8f:7e:64:8d:9c:e9:9c:50:
9c:ca:62:1c:a9:95:af:b6:db:73:fa:53:76:8a:5d:
74:68:a8:dc:ca:10:65:1a:af:1c:8f:9a:01:ea:8e:
e1:67:6e:02:66:35:3e:60:c1:47:08:69:6c:5c:7f:
56:36:78:1b:c0:4e:af:3b:a3:ed:56:03:04:84:b0:
bf:fd:48:0f:7f:15:3d:dc:c8:2c:42:ae:93:b1:86:
ee:75:13:0d:1c:17:89:39:9c:1c:29:7a:33:40:a8:
70:50:25:b7:64:30:f4:f1:ad:8b:54:f5:40:a5:30:
ae:47:81:5c:1a:dc:a7:e2:53:69:15:d5:53:f1:82:
c6:7b:c5:4e:62:82:cc:00:cd:41:09:45:73:95:38:
dd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9C:20:6E:F5:DC:C4:37:70:98:3A:48:E0:49:AA:EC:3F:0B:4F:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/g5wgbvXcxDdwmDpI4Emq7D8LT-w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.223.0/24
Signature Algorithm: sha256WithRSAEncryption
82:5b:a3:48:eb:41:7f:0b:51:90:a4:aa:8d:cc:95:26:6a:aa:
db:80:c4:50:f2:f7:3e:01:8a:9e:8a:30:d2:60:d1:e2:76:ce:
6a:d1:fd:ed:96:1d:33:c0:1b:41:82:05:70:fc:c6:7a:03:d0:
19:cf:15:d1:42:d7:b3:8d:cb:55:8d:06:17:5a:9b:f6:d2:05:
e7:3e:06:a1:dc:b2:e4:4b:33:73:28:a5:eb:d1:5a:f6:29:58:
a7:92:6d:94:d6:ac:9b:6c:b8:de:00:a5:e7:f0:09:d2:2a:ba:
4f:df:5a:ee:6d:9d:08:47:11:0c:e1:f8:78:36:58:a1:13:27:
0f:fb:aa:29:1d:19:2c:71:ec:51:4d:5c:84:14:87:da:9a:3f:
bd:91:7c:f2:85:6e:4b:ce:57:ec:7d:ac:60:ab:f9:5d:93:6c:
5a:3b:45:48:00:f9:32:0a:63:51:fd:ab:88:5a:b1:e1:59:25:
a1:50:e1:ae:9a:74:e8:73:fe:62:b1:24:d3:b9:46:f2:4b:5f:
f4:fe:8e:21:2d:b6:c9:16:ad:ba:8a:1f:9b:c7:da:51:2a:15:
de:77:95:dc:d3:b9:64:48:bc:a6:51:d8:9c:05:3b:0b:e5:4d:
79:66:9f:fc:46:15:e2:69:42:e2:0d:fa:54:0d:8f:e0:d0:06:
f2:0f:c0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 19:47:41 2024 by rpki-client on console-fra.rpki-client.org