Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
File: qIAb4jY_IRvS9XgYrer5wNvhS9s.cer (raw, json)
Hash identifier: Ow4C4wK0Bmi8uKarD5TXUVATKjWEA/klh0zhdjF/OTU=
Subject key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26CF92184ABCCB0498D17A14963E1E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 82.115.214.0/24
IP: 185.66.202.0/23
IP: 185.237.4.0/22
IP: 2a07:e3c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f9:21:84:ab:cc:b0:49:8d:17:a1:49:63:e1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:36:85:87:3e:3f:7c:25:1f:b5:af:5e:7e:3a:
da:2d:e7:38:42:af:b8:d5:eb:0a:4b:1e:a6:0d:7e:
57:da:ff:24:f8:7f:a8:8d:87:c8:1e:4a:6b:4f:08:
7a:47:c4:d0:e8:db:1c:0c:c0:e7:7e:8b:dc:91:8d:
c2:4c:d1:2f:8e:10:c5:e4:2a:30:36:99:a3:8f:f7:
84:8a:8e:47:50:00:ba:92:4f:06:ff:3e:4a:3a:3e:
cc:f2:69:0f:d6:68:2b:d3:ec:64:6e:db:f2:54:31:
f3:19:11:9d:88:44:a3:be:79:26:52:b9:9e:8b:98:
95:a5:a2:e7:38:24:39:59:04:e5:7c:db:83:fe:13:
2a:cf:70:4e:07:32:5a:f2:23:67:63:dc:d3:26:09:
87:31:d1:df:8f:13:35:77:99:e3:0f:06:34:4c:08:
b9:36:ab:c1:e4:43:27:89:97:a4:78:0e:ac:61:b0:
05:27:7b:5e:9a:47:1f:7f:4f:f6:f7:29:fd:95:d6:
cc:c6:b6:57:a1:8f:3d:d8:a4:ec:6b:67:3c:d6:5e:
ab:92:c4:85:b5:eb:20:57:70:9f:ee:e7:13:a0:5f:
52:c6:0b:6b:ae:58:79:17:30:e2:77:27:37:fe:16:
6d:6a:e4:99:bf:3c:7f:8e:a6:cb:eb:7d:d4:ed:ea:
b9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.214.0/24
185.66.202.0/23
185.237.4.0/22
IPv6:
2a07:e3c0::/32
Signature Algorithm: sha256WithRSAEncryption
a9:d2:1c:af:67:af:f8:91:86:c6:31:23:35:d9:9e:58:af:99:
d0:e8:3c:43:d0:1b:a7:7a:a5:11:48:e5:32:57:54:b0:92:e0:
49:7e:4b:1a:75:4b:c0:27:e2:18:23:21:a7:64:44:f6:fe:22:
fa:93:f2:dd:d9:69:56:ab:fc:09:44:b0:9f:e4:4c:15:da:d7:
d4:39:4d:b2:31:43:40:a4:ec:40:0d:b5:93:a1:12:35:6f:22:
61:3d:1a:9c:74:93:4f:88:1f:b2:8e:65:46:5d:ee:af:8c:cd:
f1:91:68:f8:18:90:00:ca:24:bc:a1:40:65:f0:ae:9e:b0:56:
9b:3c:db:ce:5d:f8:4d:fa:ec:b6:dc:84:ef:45:b3:fb:ea:50:
d2:0d:7b:6b:67:ae:4b:94:fd:84:3f:00:c5:7c:0e:39:c7:d7:
63:e9:45:c3:6a:8b:05:65:96:89:eb:61:53:22:22:4c:4d:61:
a1:89:a0:41:83:ca:fe:9f:7f:50:28:ab:bc:c5:28:22:60:84:
b0:31:b0:19:8a:1d:fe:37:fd:6f:2d:ea:72:dc:8c:9c:63:f1:
cb:0f:20:49:f0:5b:b7:f7:a8:31:f1:61:48:6d:16:63:fd:13:
a7:d1:77:a1:ef:56:f0:16:17:62:3c:f2:4c:df:dd:8f:0a:b3:
99:d2:2c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:15:20 2024 by rpki-client on console-ams.rpki-client.org