Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
File: gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer (raw, json)
Hash identifier: LVXT9GQdnOoUaWJERJXzD7zdTWltsrKSn7Vfv342S8g=
Subject key identifier: 80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF09579BCCEB1E31444AE076319B38
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.198.208.0/24
IP: 91.198.210.0/24
IP: 91.198.215.0/24
IP: 91.198.218.0/24
IP: 185.216.82.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:09:57:9b:cc:eb:1e:31:44:4a:e0:76:31:9b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:43:cc:6f:51:2f:48:1c:f5:db:03:86:a0:
a7:f0:a9:c8:ef:bc:2a:bb:59:6f:3a:36:da:5c:bc:
5a:30:9b:3d:7e:ba:3b:be:ca:65:c9:eb:cd:50:73:
12:93:7f:bb:dd:47:2f:d1:e5:2c:19:24:31:35:e0:
8f:06:d3:bb:af:db:0f:96:15:aa:ee:d2:a8:cb:e2:
cd:5f:51:a4:8e:44:8e:87:c7:9e:b3:c3:85:f2:17:
17:02:3b:bc:f6:ae:9c:06:bd:5a:56:fa:6f:04:e8:
e9:54:4c:04:68:c2:f2:21:51:80:78:f3:66:9d:93:
08:0e:24:e6:61:bc:1d:1c:d5:f6:06:e6:67:a3:4d:
78:a9:f3:84:03:89:75:1d:16:82:a4:32:78:5f:03:
17:d7:66:65:a0:9b:1c:84:a2:b4:ad:e1:01:13:99:
b2:8e:70:8a:42:9f:85:e9:a1:64:a8:2c:c5:d2:d6:
51:cc:dd:36:bc:28:5e:6a:e3:6c:ba:c9:42:71:76:
ec:01:a8:a7:1c:3e:51:d2:25:ff:2a:b0:76:4b:c9:
af:53:00:5c:0e:de:a8:26:1c:06:a2:1f:bd:01:f9:
b4:c1:3b:86:33:9f:9e:37:ba:45:5c:ae:71:84:ff:
86:6c:fb:d8:54:1c:b7:63:2f:fb:18:8d:f7:ca:1e:
94:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.208.0/24
91.198.210.0/24
91.198.215.0/24
91.198.218.0/24
185.216.82.0/23
Signature Algorithm: sha256WithRSAEncryption
23:bb:cd:2d:0c:92:6b:fb:b7:c9:60:95:b4:38:6e:2b:0a:32:
bb:73:bf:1f:96:59:80:0e:d9:51:46:9c:fa:22:57:f8:1a:ed:
7d:25:1d:ad:2b:78:72:0c:60:78:b2:ae:d7:48:26:e8:d3:47:
4d:d8:64:f9:7a:13:df:b7:58:18:0f:9e:34:22:ce:92:c2:ff:
bf:3e:b0:2c:64:8d:ff:be:7b:9a:a4:4f:f6:0a:52:d8:8b:ba:
02:47:11:a4:f6:be:e4:18:85:15:7b:85:60:42:f9:77:73:78:
c6:34:2f:b9:fc:70:8b:35:b8:15:d6:e8:ff:95:19:e4:f9:ed:
1b:00:9b:12:2c:8a:26:95:d0:91:4e:d0:88:59:b8:d9:e8:47:
b8:7f:33:8b:ec:da:46:c1:90:88:4d:65:53:6d:3e:df:4a:7a:
1d:be:36:d9:11:c9:68:6e:f1:67:17:a3:f0:95:d4:5b:77:41:
41:27:65:94:9c:81:83:99:04:56:f2:4f:ae:05:a0:66:2d:96:
12:c1:29:e9:24:cd:9b:bd:49:f5:60:2d:75:f9:10:26:61:fd:
b0:37:53:bc:6d:f3:ca:c6:f4:d1:33:83:88:34:18:8b:31:99:
93:6a:31:93:72:cb:a2:e0:29:b7:06:33:a0:a7:1e:7e:6a:ce:
e7:dd:93:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:35:16 2024 by rpki-client on console-fra.rpki-client.org