Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer (raw, json)
Hash identifier: lefxWxVQfCUC6enC1wu6SPCoKylEVaPkARpMpWl/5qA=
Subject key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DEFB1B2A1E8F3E0C6764FD70339B64
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.135.220.0/22
IP: 2a06:5180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:fb:1b:2a:1e:8f:3e:0c:67:64:fd:70:33:9b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a8:fc:3a:5c:9c:c9:eb:dd:70:7b:bc:b7:fd:
32:c6:6a:07:b7:55:a7:15:ae:b5:1b:c6:3a:9c:ae:
c8:66:05:52:3f:81:b6:83:16:03:2d:4e:00:8b:72:
0a:8c:50:b7:60:40:63:79:c3:ac:9e:e8:09:74:82:
06:16:34:10:03:61:ea:9e:b5:4f:71:22:24:43:d1:
44:d7:f2:a0:00:c8:da:78:29:ea:97:28:62:bf:23:
80:e3:4a:f0:5d:cb:24:bb:27:2d:e6:42:60:8d:d3:
0d:c2:0c:fe:45:1c:5d:4a:7f:1a:a6:8d:3e:6b:3a:
3f:91:9c:67:ec:f4:7b:f6:70:d0:5a:da:0a:78:cc:
5d:57:6e:cc:ce:68:18:f9:e9:ac:f6:88:32:3f:40:
6c:5b:a4:61:aa:86:96:ae:f7:ed:8d:ae:ec:c1:18:
e9:a0:14:a3:be:50:f7:32:91:43:72:97:9c:bd:cf:
5a:a0:62:2a:3c:b0:1d:66:7b:4e:ef:83:a5:4f:c1:
d3:a1:df:27:75:d4:b0:27:4d:65:bd:f7:d6:19:6a:
f7:85:c8:52:6b:bb:08:a1:5f:0d:44:34:c1:f7:bf:
a7:89:0b:e0:74:c9:97:cc:ca:be:86:df:ff:81:d2:
44:f8:8d:9c:f8:e6:67:6f:bd:ef:63:35:d4:50:c7:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.220.0/22
IPv6:
2a06:5180::/29
Signature Algorithm: sha256WithRSAEncryption
41:02:09:e8:d5:e7:9b:e1:d2:9a:cd:26:18:76:61:b7:77:8a:
dd:db:d1:2b:3f:04:af:50:f7:4f:2e:32:06:f2:30:fd:d4:1b:
2c:2d:e5:14:58:20:50:cb:4b:ab:a7:b3:32:72:ac:01:26:8e:
9e:79:16:5c:1e:54:3c:96:72:d0:c2:f9:99:bd:37:68:cc:53:
16:eb:52:1b:55:4b:e2:7f:b4:7a:5d:ac:92:39:9a:e7:4d:4e:
d1:ed:82:12:cb:f7:24:2a:b7:90:53:05:34:a4:57:fc:59:49:
60:67:44:bf:74:cd:16:36:80:c6:8f:72:59:78:ae:66:e9:0f:
f6:35:b2:54:a8:0f:2a:4b:5c:1f:ed:8b:bd:02:d4:cc:21:3a:
70:c7:97:73:c0:f4:0e:8f:1d:ec:15:db:d8:fc:56:b0:a8:df:
e4:51:2e:6a:19:d2:d9:24:fa:97:25:e0:29:c9:8a:4d:0c:9c:
1d:a9:e4:a9:f6:8f:3b:64:45:4e:ce:e0:9c:37:06:f6:24:2a:
3a:72:21:ce:5a:79:5a:78:b4:0b:c8:72:fd:9e:bb:1d:c2:48:
05:5e:90:cc:80:ea:36:ff:ba:98:e3:61:18:35:61:bb:f6:16:
e3:25:21:b0:4d:d2:9d:27:1d:f1:c4:b1:9b:c2:f5:bf:a8:68:
1f:fd:51:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:04:27 2024 by rpki-client on console-ams.rpki-client.org