Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
File: gZkBtk_iJla48tsmC0U_J5NSt9A.cer (raw, json)
Hash identifier: M54IdLk4SUowIn+1BVu7pY/N2mCFBg8FKFiX5EnBi8g=
Subject key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726C6521DFBC18C0B20A7257B713AF3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.238.51.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:c6:52:1d:fb:c1:8c:0b:20:a7:25:7b:71:3a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=819901b64fe22656b8f2db260b453f279352b7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:50:1f:df:c5:41:c3:62:6e:19:4b:4b:21:
0f:89:2d:e6:d7:85:a4:58:d6:9d:ad:c5:0b:6a:87:
2a:fe:a8:85:80:b3:69:a1:3d:3a:97:48:c4:ce:d3:
d5:8f:7a:22:3d:01:25:36:5b:f1:5a:32:c0:fb:d2:
80:d6:ce:3f:13:43:b3:1e:29:df:0d:b5:e2:9c:88:
5c:f6:67:e3:53:55:88:1b:cb:45:9f:2e:95:90:a6:
63:2c:b3:08:7a:2f:40:e1:39:a2:ec:94:b9:3a:c3:
56:25:01:55:f2:27:93:d0:05:82:1d:22:01:5c:32:
9a:8a:2f:be:b3:7f:25:08:12:b5:b4:a5:b4:9d:80:
fd:37:18:f2:49:b0:39:c9:f5:78:8d:3c:39:65:f3:
b2:c5:d8:29:e6:ba:78:70:d7:97:b9:64:7b:6a:0b:
9b:ad:27:16:a4:fc:43:c0:b7:bb:f7:2e:5c:21:c7:
8b:c3:25:a6:13:9e:f0:b5:1e:c7:09:6c:ea:ba:37:
a6:bb:ed:08:fc:47:c2:d0:41:43:9d:57:23:3a:1e:
ab:ec:74:f6:84:f5:9d:c7:a4:95:62:8b:1d:92:c7:
a1:58:44:7f:81:d2:ef:80:62:b2:cf:a9:49:d2:2c:
3c:b3:c7:2b:50:dd:5e:ff:47:21:75:9b:c0:a5:2a:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.51.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ab:a9:63:2c:aa:0d:d4:a1:60:8f:31:ea:78:22:76:5a:cc:
b9:c6:2b:81:18:d7:ab:ed:1c:98:d5:df:a6:60:1f:35:4e:0c:
ae:ad:ca:a9:5a:04:a1:52:68:e4:e0:27:78:b7:b3:78:69:ae:
db:65:5f:35:20:90:f0:86:9f:a4:9f:03:20:2c:f6:5b:16:43:
84:36:24:ce:1d:78:93:b4:f9:ca:a0:b3:ff:32:f5:97:dd:1f:
93:93:42:2b:40:d7:a6:68:33:b0:a4:17:7e:25:55:2a:5f:81:
c3:90:07:fe:f4:0a:a0:da:7f:1a:d7:a4:96:89:49:ab:16:d6:
5c:0f:77:cf:90:1b:6e:61:64:d3:74:1c:0d:6b:86:d9:b7:87:
b6:a8:6f:4f:96:29:20:62:bd:68:7c:b8:3e:3a:6d:34:d1:a2:
59:c3:49:62:b8:7a:31:fa:0f:30:ed:e2:6e:96:87:01:c0:05:
d4:b0:4d:0c:8e:45:84:66:50:96:39:0c:7e:e3:1a:0a:97:c2:
01:cd:6a:6d:04:cf:ff:59:da:8b:5c:c7:73:61:40:74:eb:50:
0d:a9:1d:f4:e0:24:ae:82:35:96:4d:28:1d:ac:d7:74:69:bc:
fd:0c:17:59:3d:11:59:6c:b2:11:d6:30:60:b9:2c:27:cf:87:
33:50:14:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:51:29 2024 by rpki-client on console-fra.rpki-client.org