Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gjdowXbuUzEYPafdL4dHn-mXfDs.cer
File: gjdowXbuUzEYPafdL4dHn-mXfDs.cer (raw, json)
Hash identifier: goqBsKjAdouE+KaKjb61LEK+brED+6ifGWcxjOzzSog=
Subject key identifier: 82:37:68:C1:76:EE:53:31:18:3D:A7:DD:2F:87:47:9F:E9:97:7C:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01900634FD28DCD486C80D7FA5B34952360A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/63c985-fb70-4025-9019-b8ebeb6d81eb/1/gjdowXbuUzEYPafdL4dHn-mXfDs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/63c985-fb70-4025-9019-b8ebeb6d81eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 11 Jun 2024 07:30:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.147.218.0/24
IP: 2a0e:8e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:34:fd:28:dc:d4:86:c8:0d:7f:a5:b3:49:52:36:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 11 07:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=823768c176ee5331183da7dd2f87479fe9977c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0c:98:b9:ef:df:dd:34:96:e1:dd:a3:3f:12:
d2:ad:c7:01:53:52:63:1b:59:12:f9:b4:e4:47:87:
2e:6a:48:6f:7e:8c:9d:5f:36:d8:df:91:d3:55:03:
9e:93:d4:d5:0f:9b:62:ee:3e:87:03:8d:f6:b7:91:
0e:63:d6:59:54:cf:b0:42:23:ed:59:4d:37:81:b7:
e6:2b:29:b4:e0:1f:4a:02:d5:ce:c4:86:26:47:e8:
0d:0b:e9:c6:76:c3:65:b5:6c:e5:1f:a0:4c:4f:53:
a8:f4:99:bd:01:e1:d5:2f:91:34:9f:e6:5a:da:1f:
71:ea:a5:ab:8d:5a:63:e3:8c:07:71:e5:b2:c5:8c:
1c:c3:78:27:f7:2c:09:69:a6:0a:d7:f7:de:93:69:
ad:d2:10:42:8f:d6:28:9b:a6:9e:3d:37:1e:24:ae:
ce:c1:37:2f:46:9a:a7:21:f3:e1:ea:d2:b7:b7:0d:
ae:93:24:bf:aa:f5:52:24:84:4a:49:f8:7f:45:a5:
99:bb:ad:13:dd:81:7a:c1:87:08:47:b6:76:fd:bb:
6d:7f:3d:67:2c:eb:d8:99:4c:9c:d0:3c:10:13:4c:
ab:0b:79:d2:e6:ed:9f:bf:87:4b:e6:38:d7:33:8f:
6c:e9:4d:f9:81:83:1c:fb:96:eb:68:49:73:92:6a:
f6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:37:68:C1:76:EE:53:31:18:3D:A7:DD:2F:87:47:9F:E9:97:7C:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/63c985-fb70-4025-9019-b8ebeb6d81eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/63c985-fb70-4025-9019-b8ebeb6d81eb/1/gjdowXbuUzEYPafdL4dHn-mXfDs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.218.0/24
IPv6:
2a0e:8e40::/29
Signature Algorithm: sha256WithRSAEncryption
ae:17:1d:0f:8b:c7:ea:eb:f5:cb:59:ef:48:45:13:21:57:7c:
6d:33:63:a2:ea:52:33:69:36:dd:af:52:c4:ef:4b:1f:23:e3:
85:4c:ab:f6:3e:7d:ad:4b:b6:e0:80:91:c8:a8:f9:44:d3:33:
cc:50:75:b3:bc:83:82:e5:63:5e:6a:51:d5:00:fc:e0:b5:88:
66:ec:51:45:1a:7f:5c:e2:19:6c:c8:43:fc:53:3e:f5:d4:2c:
03:0b:27:e5:9a:f0:05:87:cc:2d:98:56:5a:29:35:96:42:e7:
41:dd:9e:63:11:c9:7f:6f:6f:51:aa:31:0a:7b:54:09:fc:54:
49:c4:54:7c:94:28:04:2d:22:1f:f4:4b:da:2c:43:98:1f:64:
90:8b:ed:cd:e7:85:11:8c:77:8e:45:32:da:d5:33:98:54:72:
5a:43:19:01:d2:79:cd:95:f8:d9:e8:78:fa:e0:90:06:92:c8:
d6:09:a4:2c:f8:28:b7:64:cf:cc:df:5d:09:bc:84:71:56:c8:
58:03:72:8c:7a:55:b2:49:b1:7a:2c:9b:bc:b9:1b:35:2e:0e:
00:95:f0:ae:4e:1e:6f:d9:86:74:15:27:18:6e:45:21:c5:83:
ad:0c:3e:1a:87:ac:87:46:f4:30:05:eb:fb:71:34:47:53:7c:
e5:37:42:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:10:43 2024 by rpki-client on console-fra.rpki-client.org