Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
File: rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer (raw, json)
Hash identifier: PtqyGlkJtdxsFZovwh1BXc8+6oO2vEnfik5XkrqPSVc=
Subject key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86EFD6731EF4D9AE1328FE6821E8BE2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 89.33.107.0/24
IP: 89.42.108.0/23
IP: 89.43.79.0/24
IP: 185.128.96.0/22
IP: 185.197.149.0/24
IP: 195.62.51.0/24
IP: 213.170.208.0/22
IP: 2a06:cec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:fd:67:31:ef:4d:9a:e1:32:8f:e6:82:1e:8b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:16:5a:ee:0d:38:25:fd:ca:97:c9:53:50:
da:b3:c3:3b:fd:19:0e:d0:5b:e9:6b:7c:e5:eb:8f:
e4:df:39:2e:34:8e:3f:5d:4b:76:0e:d1:ab:fa:45:
e8:70:c6:4f:f1:7b:66:89:94:26:e3:45:53:53:ce:
79:2d:15:7c:60:dd:a9:10:05:e0:8c:44:30:5c:29:
73:0c:4b:99:a4:59:4b:52:d1:04:c0:d2:9a:44:45:
30:aa:23:52:9d:78:6f:26:92:0b:37:a1:93:0c:90:
75:51:41:aa:72:31:30:54:85:e8:5d:b9:5d:f5:71:
9c:c2:96:73:d0:13:8b:79:50:45:9e:2a:61:9f:99:
1f:be:e4:70:d3:13:b8:ca:20:73:56:50:4e:95:fc:
85:a9:c9:6d:60:4b:5d:86:3d:77:7f:0a:df:c0:61:
c4:36:fd:0a:57:34:a9:32:22:d4:dd:43:9b:80:80:
02:43:5a:0a:d6:5e:c4:19:1e:85:fe:e6:89:d5:b3:
37:b7:eb:fc:aa:b4:0d:13:10:02:a3:f4:85:28:f4:
8e:dc:d8:bd:88:13:e9:e9:8a:66:9f:1f:28:2a:a4:
e6:e1:08:d4:40:41:b9:dd:c9:cb:53:be:b7:76:fe:
07:95:d8:5c:98:1a:44:7d:03:fa:93:20:23:9e:a6:
39:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.107.0/24
89.42.108.0/23
89.43.79.0/24
185.128.96.0/22
185.197.149.0/24
195.62.51.0/24
213.170.208.0/22
IPv6:
2a06:cec0::/29
Signature Algorithm: sha256WithRSAEncryption
9b:a3:78:34:43:02:78:18:9c:af:2d:20:84:38:01:cb:e9:5a:
27:4c:19:25:ce:6b:7d:c0:03:a2:c4:0e:cc:f2:8e:08:6c:39:
6a:c4:28:35:e7:26:13:16:ca:60:ca:3c:36:dd:7d:b1:ae:ba:
d1:17:80:44:d6:c8:07:a6:28:00:8e:f7:d8:43:69:3c:33:fc:
1a:80:61:7c:0f:96:e7:72:5c:db:7e:d6:b7:c3:fd:8c:b6:9b:
48:b2:98:db:78:7b:50:3e:31:1c:19:b1:32:f4:3f:63:24:39:
67:3e:59:d7:d2:bc:8c:f8:02:81:90:3f:06:81:6f:5e:78:cd:
11:1d:89:24:9d:3f:8a:39:14:05:be:a5:60:61:8d:f1:16:e5:
1d:c8:16:91:3a:d0:98:e5:93:53:88:b0:18:d4:dc:ce:61:c5:
70:13:75:a9:b9:16:07:31:16:44:31:4d:2c:55:c7:e6:0e:be:
82:a0:c2:21:49:5e:7b:6d:4b:6c:0c:c6:1c:63:d0:8f:59:db:
53:73:39:12:fb:d6:51:d5:96:3e:8a:d0:99:16:3a:86:61:fe:
de:c8:a2:b9:bd:fb:ce:4a:d2:0d:9b:f1:bd:c5:0b:3a:82:db:
37:3c:79:88:57:1a:30:02:72:db:ee:a6:65:4f:54:9e:0d:99:
bb:f8:51:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:45:39 2024 by rpki-client on console-fra.rpki-client.org