Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
File: g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer (raw, json)
Hash identifier: HeEjvlFxYKuHfydFOKO4OONJYpH42vaGV4+hJAPl+aI=
Subject key identifier: 83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC349329AD3539277DC4AEC63FB63D7BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 64.39.233.0/24
IP: 64.39.236.0/24
IP: 91.199.81.0/24
IP: 185.124.66.0/24
IP: 216.120.180.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:32:9a:d3:53:92:77:dc:4a:ec:63:fb:63:d7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83c966da5eead50905091c3b599c9a44074739d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:1f:2f:14:cb:d6:ec:1f:e4:ef:41:9a:33:
c9:8f:0d:39:b1:c2:4f:94:2a:8c:30:86:d5:91:10:
f3:1d:4c:fe:f6:73:90:e9:3a:b7:ac:f4:61:69:19:
a3:67:53:62:30:1a:a5:8b:dc:a2:e2:14:d6:b0:5e:
18:03:7c:7a:6e:47:41:86:ff:b8:f2:93:9f:20:0a:
61:52:bd:63:23:df:e0:5f:b8:51:cf:3f:82:18:c7:
43:bd:4b:ad:11:04:dd:b7:3a:04:e1:bb:72:4b:39:
1d:e9:48:63:43:29:38:6f:2f:a8:08:c8:ce:a0:22:
94:dc:00:1d:22:34:6a:88:21:c0:13:6d:da:b6:67:
1e:cb:fc:f2:b3:37:d1:6f:29:7e:0a:38:15:7a:fb:
6f:a3:c7:ea:4a:1a:31:4f:9a:c2:48:66:81:fa:f9:
01:fc:a5:6f:1d:72:21:10:3c:16:4d:c5:c4:f5:8a:
4f:68:b1:15:51:97:0b:8f:dc:f7:32:37:bf:e1:2d:
bb:06:e3:31:16:5b:8b:35:6d:a3:42:c6:ed:2a:ce:
17:22:4b:8f:d6:22:5f:fc:32:77:0d:d7:ec:c6:80:
32:8f:0f:3b:23:c3:19:8e:22:c3:7d:9f:e3:7e:af:
5e:b0:26:d4:97:63:58:19:0b:ea:39:86:b1:9d:91:
c1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.39.233.0/24
64.39.236.0/24
91.199.81.0/24
185.124.66.0/24
216.120.180.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:d4:83:e2:e6:82:40:d7:1d:72:44:99:0b:2b:9a:66:dd:f8:
ee:9d:3b:8d:00:9b:f3:00:9e:f5:85:2d:39:16:3a:c0:59:1e:
e7:41:4d:e6:41:d1:fa:73:ab:e7:24:8d:42:01:79:8e:5f:0b:
c1:fc:2b:0b:a3:43:bc:d8:01:98:fe:c0:c6:4f:f5:39:c8:36:
bc:41:74:47:19:44:ee:91:15:21:3a:5a:65:b8:2f:08:60:20:
98:61:e8:94:d6:6f:75:8c:56:e9:5e:8c:cb:8a:38:ab:74:9c:
6c:02:7f:8c:bd:84:1c:80:86:53:53:fa:31:76:17:a8:a7:4e:
e0:15:c6:36:0d:c7:eb:47:d0:fc:9d:3d:30:d8:b8:41:34:e5:
2c:a3:79:33:7f:a9:05:74:f5:a4:2c:c9:5e:e2:ac:f4:28:b7:
fd:30:09:bc:ab:7c:8a:77:b1:4d:37:f5:8d:2c:cb:37:e3:05:
b0:f3:83:7f:cf:88:9b:92:da:59:ba:9c:b3:90:58:4b:dd:bc:
ac:19:89:44:37:e0:7c:22:25:74:99:f0:9b:af:34:5d:04:91:
0b:97:32:0f:50:e8:f1:43:ef:46:f6:3a:87:96:fb:c1:fd:7b:
75:f0:24:76:bf:48:6a:35:1a:3a:40:11:2a:ad:42:a4:62:eb:
4c:23:77:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:35:06 2024 by rpki-client on console-fra.rpki-client.org