Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
File: rGzIYDNT1zLkscy6fqygts7kxM8.cer (raw, json)
Hash identifier: f3vs2xJv1ij5EeDslCBo7lmokcE+GhKAwf0BMSmhRlI=
Subject key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42470A3E0035888928475BA230FB144
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.223.144.0/22
IP: 2a0c:400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:70:a3:e0:03:58:88:92:84:75:ba:23:0f:b1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f1:42:97:41:05:c9:aa:50:a1:89:e8:27:0f:
69:45:bd:48:27:5e:71:d9:f6:c6:a0:f1:55:14:57:
42:ec:17:61:7e:fa:1c:e9:89:25:9d:5a:51:92:e6:
d8:4d:61:9c:db:2b:80:6b:38:5a:d7:0a:99:c9:86:
e6:d0:d8:84:8d:1f:8b:52:e9:b8:7c:23:70:b5:b9:
7c:d6:99:4f:dc:bf:eb:99:95:e0:34:b1:3a:5e:d8:
e9:fa:ef:68:be:9b:35:38:aa:3f:02:51:69:76:db:
5f:02:de:5b:88:58:e9:78:ff:5b:2f:c9:2b:93:92:
5e:7e:8b:06:51:57:66:23:72:1a:e7:eb:42:92:45:
0c:0f:16:eb:68:d8:a1:d2:65:0f:b4:13:54:d2:8b:
b6:21:e1:d0:c3:b5:ef:72:be:bb:84:cf:fb:63:02:
12:ec:c4:02:15:b5:a5:49:a1:16:80:f5:67:8c:ac:
13:7a:35:66:82:75:46:f9:6f:55:e9:51:51:78:80:
2f:d5:da:da:49:3d:d4:20:6a:78:db:c8:0c:2b:b8:
3c:2a:be:d2:d5:72:9e:23:29:df:06:c5:8b:bb:2a:
e1:6d:1e:aa:a1:1a:e7:3a:b2:7c:54:d6:9e:46:ff:
b6:92:d9:85:5b:b4:3f:6d:e9:47:42:bc:fe:27:4a:
88:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.144.0/22
IPv6:
2a0c:400::/29
Signature Algorithm: sha256WithRSAEncryption
38:dd:7b:87:ce:fd:dd:db:1c:a5:43:d9:63:0f:8e:38:9f:e3:
7a:d9:b8:63:03:ca:49:d4:10:d1:52:6e:7d:7d:a2:39:33:50:
1f:0b:12:e9:1b:45:8c:b1:98:bd:ed:48:ec:5c:ac:c6:a7:2d:
a2:9a:23:32:83:b9:ce:ef:47:c7:01:65:ea:44:ab:ee:a1:bc:
e5:d3:de:1b:34:2c:cb:77:68:cf:a9:91:c3:48:26:e4:71:09:
1a:bd:e8:a2:4e:87:5a:99:00:c2:2a:34:1b:98:38:a7:c2:83:
6d:bb:f3:9b:d2:4e:b8:f6:fa:13:08:a1:0e:0a:08:d5:45:68:
b8:6a:0c:4b:e4:87:57:e4:6f:41:da:57:fd:fb:a4:4f:42:56:
ea:3b:24:76:89:17:72:f4:f2:65:b5:11:43:37:7f:fd:e9:75:
88:39:96:0f:01:2f:a0:29:b8:b2:91:3c:a7:c0:82:15:70:04:
57:1d:50:d6:4a:8b:8f:69:cc:1f:97:65:6b:45:cc:a6:7c:b5:
9e:79:24:32:a6:dd:80:76:ee:04:59:61:b3:01:a0:d5:e3:a3:
19:92:05:c2:17:08:20:66:0c:6b:af:c7:ce:e1:a4:ff:02:f2:
72:9f:49:e9:6d:2a:3d:c8:47:92:63:1d:f0:04:09:51:e3:0d:
0e:f4:50:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:00:59 2024 by rpki-client on console-fra.rpki-client.org