Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gOtx0BmkgyJcMkyIxsSAIO-fEWg.cer
File: gOtx0BmkgyJcMkyIxsSAIO-fEWg.cer (raw, json)
Hash identifier: vTJ/qkLy6EPqH1QmUFoWmwAB/V9KVhKWdyNdBXEFztI=
Subject key identifier: 80:EB:71:D0:19:A4:83:22:5C:32:4C:88:C6:C4:80:20:EF:9F:11:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DD165E2E669E38C614901F8B03DD4C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.14.164.0/22
IP: 2a03:b440::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:16:5e:2e:66:9e:38:c6:14:90:1f:8b:03:dd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80eb71d019a483225c324c88c6c48020ef9f1168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:f1:e6:80:36:95:be:06:c3:d0:ba:97:84:
84:16:0f:5f:05:77:a2:91:76:72:be:33:1b:da:39:
e4:31:dc:58:05:b3:02:41:3e:da:d9:91:2b:cf:76:
aa:8e:c7:43:d4:c3:44:4c:f9:80:e0:87:83:17:86:
08:95:24:18:85:09:f1:16:dd:73:d8:04:0d:8c:47:
3b:51:bb:85:3b:71:31:7a:b1:7c:62:32:62:97:11:
49:e9:1f:34:d6:e3:47:6f:43:ba:00:65:27:d0:5f:
ae:2b:d8:d2:28:b8:44:5c:f8:19:be:4c:27:01:a2:
74:8b:10:0f:95:39:7b:3b:f2:55:22:2c:69:c2:87:
39:e6:09:54:e5:f3:26:57:7f:e8:b2:ab:54:ce:99:
bc:28:f1:b1:21:ae:9b:1c:ef:93:e7:1a:22:2a:70:
f5:c9:a6:15:19:12:57:a8:54:bf:48:b2:9b:df:ce:
03:c3:ee:3d:23:e2:79:5d:dc:08:84:9d:40:a1:c7:
c3:32:71:9a:c2:de:b3:71:75:e0:df:13:93:bf:d8:
0e:6b:67:86:21:bf:f3:46:bb:e2:13:0e:8f:f0:99:
25:da:a1:b4:8b:ee:e3:a0:8e:c3:30:bb:d5:68:72:
01:b7:93:4c:9d:f9:f6:93:df:3f:c9:1b:4e:bc:43:
8f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EB:71:D0:19:A4:83:22:5C:32:4C:88:C6:C4:80:20:EF:9F:11:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.164.0/22
IPv6:
2a03:b440::/32
Signature Algorithm: sha256WithRSAEncryption
30:60:e7:b0:74:86:02:9c:49:1d:b9:1e:05:d2:0b:3f:1c:44:
2b:be:83:c9:fb:54:e9:26:4c:4c:bf:d3:c9:d6:36:db:62:99:
73:dc:9b:dc:60:51:f5:61:04:a5:ca:48:75:33:63:fd:3c:96:
46:a2:5f:a1:fb:20:3c:cf:2d:51:3e:ca:66:d5:c2:b5:d5:f1:
06:b2:c8:96:55:ea:95:16:43:6a:70:86:15:de:b8:37:28:5d:
2d:74:8b:50:ec:69:57:33:47:2a:39:fc:84:eb:81:78:21:2c:
7f:5b:42:5d:c9:75:77:80:7f:27:0c:2f:9d:3a:37:d4:22:b4:
44:85:77:6b:3d:cd:33:36:a9:28:50:78:82:66:b1:4f:07:73:
b5:7f:4f:2a:b7:9e:b9:fa:59:c8:25:39:8c:0e:84:11:60:27:
ab:de:59:66:4a:cd:0a:43:34:39:af:8b:d7:42:fe:96:6c:ff:
5c:e1:fc:59:8f:f9:cb:44:fa:9a:67:9f:73:c0:6f:85:48:13:
02:f6:a7:b6:7f:9a:00:24:1d:b2:c1:c2:f2:1d:80:0b:63:c1:
dd:7c:b8:89:9e:21:58:50:a0:0a:d1:6c:b9:c6:96:f7:c7:5d:
3a:bf:d4:f8:91:a4:65:b4:5b:d4:fd:bd:e8:6b:85:5d:80:1a:
d2:f7:bc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:35:17 2024 by rpki-client on console-fra.rpki-client.org