Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer (raw, json)
Hash identifier: Qk2fvWe/1JbrKwC5roWRmkhh9hKQM0FrvNj5HQ+LLW8=
Subject key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B5010E2353D9D30AD3D28C37CF391
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.18.148.0 -- 185.18.150.255
IP: 2a04:b80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:50:10:e2:35:3d:9d:30:ad:3d:28:c3:7c:f3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80043f23936622824111e8865a50002067d95a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:69:b5:29:ca:67:2b:b0:f8:bc:c7:d0:79:76:
0b:91:17:3e:25:6d:b7:df:f2:08:27:27:c9:2c:59:
f7:4c:c7:0c:a7:99:85:7b:30:2c:88:06:70:5f:10:
8a:b1:25:21:dc:89:f9:40:38:ca:6e:26:e9:6c:ee:
6e:df:3b:be:87:16:10:b3:d2:a0:1d:26:46:39:c6:
5c:62:30:9f:aa:ca:98:c0:82:a9:5c:6b:af:07:6c:
93:a3:c3:8d:b1:94:ad:c9:74:e1:10:26:93:c4:40:
8b:ce:58:9a:87:51:75:cc:60:f9:12:70:8b:c6:11:
b3:56:5e:45:b0:2b:69:3e:99:07:c6:38:f1:30:03:
f8:fb:d7:2b:92:ab:01:ea:70:f1:49:74:7a:a3:66:
07:97:91:fa:37:38:55:e1:c6:be:ea:68:22:82:bd:
bd:16:9c:48:e0:90:89:99:7a:1d:cd:dd:20:d5:cc:
09:d3:a2:4f:d1:34:7e:8c:99:f9:91:3a:5f:f1:6c:
88:64:89:bf:f7:33:a7:37:ca:f7:2d:47:e2:2f:9e:
3b:05:07:f6:8e:15:a0:e3:16:53:b0:22:c3:de:59:
6c:04:d1:8e:73:ba:aa:98:25:a8:38:c3:4b:9a:4e:
ac:5f:f4:34:67:fe:d0:e2:b0:d6:4c:ef:3a:84:43:
47:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.148.0-185.18.150.255
IPv6:
2a04:b80::/29
Signature Algorithm: sha256WithRSAEncryption
67:cc:21:81:b4:ff:51:d9:84:7c:03:03:d0:c2:e9:8d:30:19:
79:96:e9:59:71:76:4e:36:ba:ef:8a:8a:27:9c:11:6b:ed:ef:
b8:c0:f1:69:d5:08:43:a8:86:67:09:a3:82:fc:91:29:b0:20:
6a:ab:51:0b:4c:24:8e:39:4f:c8:d3:ad:a2:0a:19:78:43:18:
fb:da:59:ab:7f:b4:08:a5:32:1a:3f:ac:57:35:0e:2b:a9:d8:
32:91:f6:17:7b:70:63:0b:63:e6:b6:23:6b:9c:d0:ac:e0:1c:
d3:64:8a:16:bc:47:c9:b0:3b:89:24:47:71:47:94:ce:f6:85:
01:56:86:5f:4c:22:de:13:cb:75:9e:6a:9f:19:57:f7:2b:69:
66:50:7d:df:94:d6:2a:cb:80:93:e2:53:73:cb:d7:10:66:75:
e6:b9:46:b5:9e:e1:ba:ed:81:6b:5f:23:4e:bd:90:90:dc:7b:
89:06:e9:4a:fe:81:7e:f9:c6:b7:cb:10:55:57:40:ac:fc:df:
33:ff:ae:17:02:96:4b:56:e6:e3:28:64:2d:3d:5c:4f:39:ec:
a3:4b:51:32:71:78:35:f4:89:f3:81:d0:a7:65:0d:20:4d:1a:
45:fa:47:6b:a9:5c:ad:af:2f:96:59:f3:1f:9d:0f:af:49:33:
bc:2a:d5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:43:48 2024 by rpki-client on console-fra.rpki-client.org