Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
File: pstoJGZQvVjCKirgCtBmF4qB628.cer (raw, json)
Hash identifier: JN4TbngdO8Im3Lhby347kd+79ZnC1Xba0k/6hxbcqgs=
Subject key identifier: A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D55AEC33179D8D3BCBDAB3BA80EA9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.160.176.0 -- 193.160.187.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:55:ae:c3:31:79:d8:d3:bc:bd:ab:3b:a8:0e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ed:c1:ab:73:f3:16:c4:25:50:e0:b1:0e:cb:
b6:7e:bf:e0:4b:da:62:a4:7e:1b:b1:0d:48:77:c8:
8f:37:f7:22:23:f8:06:51:25:e9:15:19:ec:91:c8:
6b:ad:97:c1:7d:59:ac:b6:f0:cc:d4:47:aa:2a:85:
a3:d7:bf:25:e7:43:be:a3:5d:3c:e6:36:8b:cf:75:
61:6b:1d:39:cb:d1:7c:31:27:0c:65:69:b6:d8:5a:
bd:a8:3e:2a:40:4b:b6:9e:47:a5:6b:7d:14:df:3c:
26:d6:e5:14:aa:90:72:38:20:7c:91:8d:eb:06:fa:
13:49:bc:59:79:ff:87:6e:02:2b:16:f2:30:71:53:
1e:30:8e:5d:a3:ca:b9:81:86:44:bc:83:c0:67:c2:
57:6c:fa:42:ab:5f:ef:4e:14:e6:77:d4:62:84:e4:
d6:94:da:7b:31:5a:32:48:87:4a:92:d2:a8:3f:9b:
3d:57:e3:34:4e:4e:13:b6:8b:22:ba:e6:e7:cf:e0:
34:73:46:1e:14:06:82:d7:d0:03:20:f5:6e:1d:71:
f7:a2:cf:7c:dd:13:37:87:37:66:75:4f:81:bf:d3:
ae:6d:8d:64:68:7d:a4:a5:46:26:19:27:5a:64:dd:
7b:92:95:9d:86:89:6c:10:1f:cd:48:28:95:a3:d3:
93:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.176.0-193.160.187.255
Signature Algorithm: sha256WithRSAEncryption
38:e9:72:8e:28:39:01:9e:44:8c:aa:45:d9:fb:2a:d9:6c:d1:
1e:ee:46:36:4d:c6:10:c9:f9:65:84:3b:05:d3:0d:e0:98:7a:
a9:da:13:03:24:31:7e:00:bf:69:f2:2c:41:b3:47:67:5c:3f:
51:c0:4c:6e:ed:7f:b4:e3:a8:ec:ef:84:1e:18:2c:30:2a:e8:
c3:4d:40:b2:1e:e9:86:57:e4:4b:20:0c:44:87:27:fc:db:9f:
92:35:28:12:84:f6:5d:fe:a5:7f:e5:b3:38:31:c8:42:02:a0:
c0:6e:77:61:f2:de:40:0e:10:cd:f7:b4:cc:64:01:93:85:3c:
40:0b:39:5a:d8:6b:2e:b4:d8:08:6a:0b:a6:c5:09:30:ed:52:
0a:b1:9f:d2:2c:3c:3a:2b:f1:f5:01:2c:9f:d7:c1:89:c7:90:
67:5c:c4:30:e1:74:e6:c9:ed:63:fd:a3:98:a2:fd:24:95:fa:
cd:9c:8e:0b:e3:46:e6:69:b7:63:9f:f3:c8:2b:7c:ce:c2:44:
22:79:75:ce:ef:75:84:7b:e4:26:2d:ab:15:71:33:e5:8a:75:
b6:cd:00:26:05:a9:60:5b:98:71:f5:cd:2c:cc:3a:29:65:85:
3c:12:df:28:a3:84:65:60:36:da:61:d3:7b:38:fb:1c:be:8a:
c2:f1:7d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:44:12 2024 by rpki-client on console-fra.rpki-client.org