Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
File: igKbHrUc1PS8TdmFoOxlOnXspAw.cer (raw, json)
Hash identifier: IHJ1Fgvwl1sd3zNU0JD/pEC24c83KXecJmBEiNmqIrs=
Subject key identifier: 8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4939F0EA833D03C53F974AE2B0F130E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 84.241.64.0/18
IP: 185.92.64.0/22
IP: 2a01:b540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:9f:0e:a8:33:d0:3c:53:f9:74:ae:2b:0f:13:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:e8:d7:86:c8:2b:d3:65:7f:ec:d7:f6:53:
83:9e:1a:b0:3f:77:a1:71:d3:04:f2:d9:8e:46:b1:
64:d8:8a:7a:e4:e3:6b:9f:13:23:03:33:a3:92:bf:
15:62:2e:a7:c0:10:e2:bd:ec:35:24:07:a6:88:16:
a7:32:33:c5:0f:b2:43:54:db:08:77:02:78:63:a0:
b4:88:e8:4a:55:2c:9e:8a:66:7f:93:48:52:ce:b6:
77:b5:69:4f:d8:4c:d0:57:de:5a:e4:c1:84:df:37:
67:b5:0e:9e:e7:ed:96:63:4e:10:28:1b:ef:08:de:
7f:2d:a0:6e:cf:02:0a:14:6a:a3:76:cf:4e:0f:f6:
a4:1b:d4:2e:46:58:3b:da:1c:64:52:73:cd:34:43:
3c:55:d8:f4:3c:1f:62:f7:f5:3f:43:f8:4c:9f:24:
ad:da:c4:bd:3d:d0:67:16:1c:86:73:07:76:dc:6a:
83:3f:78:94:71:f8:19:83:43:0c:a7:30:86:2b:60:
d8:ef:15:9c:14:9f:e6:2c:d4:d6:84:c1:14:70:b4:
98:ba:f8:b1:d2:5d:1d:ac:2d:1d:93:56:ed:1b:99:
dc:6b:34:94:13:72:cf:07:f3:c3:c0:00:56:f1:76:
84:22:33:49:39:1f:be:82:b8:aa:0b:7c:38:da:a2:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.241.64.0/18
185.92.64.0/22
IPv6:
2a01:b540::/29
Signature Algorithm: sha256WithRSAEncryption
19:40:18:7d:49:84:b9:a2:c8:7f:14:7e:c3:01:ae:b7:69:10:
8d:b1:f8:0e:bb:fe:f1:80:bc:29:0a:d7:c4:c2:1f:66:af:bd:
96:52:75:5d:a1:26:98:73:da:0d:6c:66:7f:63:26:f4:cd:85:
60:14:a0:51:12:e2:a7:5b:d8:ff:76:b4:80:13:95:ce:3b:9c:
bc:2d:6a:f5:c8:39:86:c1:ad:81:63:29:aa:ca:22:d9:fe:ee:
60:9e:e4:cc:ac:34:7a:2d:c1:17:82:97:3d:7c:32:13:3e:6d:
97:b2:6b:4d:18:32:c1:8c:30:ba:36:0e:72:d8:8f:c8:8a:6a:
8c:ec:e5:77:b0:d7:89:66:2e:11:a8:b0:32:89:e7:f8:4c:20:
b1:be:14:0f:34:61:6d:e7:11:c7:db:70:ef:1e:8a:e4:9b:68:
5e:71:92:ad:15:30:84:40:14:f8:f2:7d:3d:e0:fd:63:35:38:
ed:c9:de:7a:d8:11:ce:66:24:8f:be:a4:4d:6d:df:a2:5e:a5:
80:f2:74:a8:2b:d8:2f:2e:03:95:6b:ea:33:83:46:c4:63:6f:
d8:ef:4f:0f:2a:2d:20:5b:47:70:de:66:a5:0e:54:92:7c:11:
e5:2e:8a:ee:8e:54:55:6e:07:6d:ff:66:61:39:75:4f:39:41:
0d:4c:a9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:55:26 2024 by rpki-client on console-fra.rpki-client.org