Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
File: k-DpokYd9Py54i53cLJhOgckE4g.cer (raw, json)
Hash identifier: 1hZ6rkm+giJbmnVD2TEzvmBWJ7Psu0PGUmWJXS1dI1Y=
Subject key identifier: 93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B0C3FF6644B8C505389BA898EA3A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.141.104.0/24
IP: 193.141.110.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:0c:3f:f6:64:4b:8c:50:53:89:ba:89:8e:a3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cc:19:e9:9a:12:22:35:28:f5:c1:bf:73:2d:
24:ac:52:24:7f:34:79:69:b2:46:4d:1a:94:fe:42:
e5:a6:dd:5a:8c:be:4f:67:98:f5:6f:2b:ab:22:31:
af:44:df:da:b1:52:e4:73:ff:e7:a0:53:47:17:da:
07:52:6b:ac:06:0c:d1:2b:09:94:18:e7:ec:d6:0a:
1b:40:cb:65:3b:69:0b:47:f7:24:d7:10:4b:f2:2e:
4b:86:89:7c:55:f5:b2:93:38:47:1e:03:c3:61:2c:
ec:a9:93:9c:85:ba:60:bc:bb:7d:65:5a:a5:4b:39:
16:fe:94:e3:95:56:d5:be:9e:41:6a:1b:bc:22:3f:
b7:a9:b0:31:0c:a7:85:8e:0f:a9:fb:eb:82:d0:7e:
cf:59:19:38:5c:3c:94:ac:0e:e3:c3:9e:e8:5e:a7:
65:83:b9:09:fa:b4:e4:70:13:e6:42:f7:e0:99:a2:
c2:d4:75:d9:ff:16:09:8a:58:5e:34:d8:c4:34:fa:
2b:b0:c3:78:3a:12:de:85:10:f3:de:96:e7:57:31:
a3:3b:f6:72:96:1a:40:70:65:77:ba:1f:e5:8f:e7:
b8:b8:b0:60:87:40:87:8d:d3:23:0e:d0:40:4b:2f:
2c:dd:ed:10:14:b9:65:b0:6d:64:ba:22:57:99:69:
df:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.104.0/24
193.141.110.0/24
Signature Algorithm: sha256WithRSAEncryption
05:fd:45:76:12:d6:d5:18:19:01:56:3d:c5:c4:52:ef:e7:53:
ad:d5:4f:29:5c:87:d6:7e:a8:56:a4:cc:75:39:10:10:90:d5:
91:ed:c2:2f:99:8b:72:a1:47:a6:ab:22:78:7e:de:6b:b7:14:
17:6f:de:26:a2:db:93:83:4c:2b:38:36:27:74:39:3a:64:ef:
23:f9:8e:5d:ba:34:19:7b:55:41:69:82:00:7b:65:90:42:7f:
5f:8a:65:14:14:52:ff:0e:11:03:89:17:37:8b:b3:91:aa:af:
03:71:7b:f9:7c:62:20:79:0a:da:67:0e:d8:01:25:94:34:7a:
a1:36:0a:76:61:71:54:ca:6d:4c:4b:83:24:1e:1a:c0:ee:f8:
49:99:be:8a:ad:10:6b:c8:3e:3d:8b:4f:fc:03:40:d7:5e:ed:
20:c4:bc:14:3c:24:ec:7b:40:87:e9:0a:b0:c4:a1:7d:57:38:
0f:0b:77:1b:37:bf:b3:b7:48:e6:e2:70:77:48:44:fb:9b:32:
d7:e0:7d:d2:35:d3:a3:59:ba:d6:67:19:04:e2:61:aa:d6:51:
84:90:b5:f0:45:74:f3:e4:39:66:08:c7:99:70:97:38:83:73:
96:b9:5e:1d:10:1c:52:92:10:1e:a1:ad:0b:e4:42:39:a1:73:
e0:b3:fe:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:11:27 2024 by rpki-client on console-ams.rpki-client.org