Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
File: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer (raw, json)
Hash identifier: yj3Qn8Fjfy17KaBrpmDfUrAzxJ3Mtv5JVG7KjwuYhBo=
Subject key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B68C6DD39B0414148269C323BEF4EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 147.231.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:8c:6d:d3:9b:04:14:14:82:69:c3:23:be:f4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:3e:6d:8b:bf:5c:52:53:20:04:46:97:6b:
63:21:6f:45:df:dc:dc:43:2e:cb:81:c8:14:ea:dd:
86:52:d0:94:d6:b2:1c:bf:0d:45:83:46:98:af:4f:
ea:5c:5b:c1:03:27:5d:fb:de:c5:8c:d3:d0:a5:28:
5e:27:b3:ac:a2:04:9f:83:4d:a4:a8:ae:b5:31:3d:
50:c1:91:ac:4a:39:cf:84:2d:0f:a0:f7:fb:e7:8a:
86:77:08:5d:5d:32:ea:37:b5:87:df:6f:9e:eb:6b:
38:91:a3:a9:1a:09:28:ed:1d:66:9a:3d:44:41:4b:
46:b3:7c:b1:87:b0:e0:14:63:82:45:18:5d:4e:15:
7a:a8:c3:7e:a0:16:f8:4d:a2:bc:4a:81:82:7a:48:
b4:96:90:5c:bc:aa:65:89:8d:84:72:bb:e1:96:96:
bf:e2:e5:58:14:54:a3:cb:85:08:0c:a4:48:c0:3f:
ee:29:66:e8:f7:1e:90:d9:2b:bd:ca:55:50:4e:79:
76:96:08:d1:a2:45:4e:8c:54:90:5e:0e:96:bd:af:
cf:47:d5:b1:bc:fe:fd:20:7f:2f:37:21:b4:96:f9:
67:1d:7f:10:6f:a3:2b:83:09:bd:01:46:31:5f:df:
d9:b8:7c:64:90:3b:33:2e:a5:60:df:f9:34:8d:3a:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.231.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:1f:c4:cb:54:89:72:0c:7e:ff:c2:b9:a0:26:d3:f9:5c:8e:
2b:43:4a:8f:75:d5:fc:b5:69:37:7f:f0:a9:5f:23:e1:37:ab:
0c:25:b3:e9:1e:39:df:7a:1c:ea:c0:08:22:49:28:38:46:96:
4e:bb:e4:5a:59:bb:90:f7:36:33:b5:8e:a5:a8:1b:57:3a:75:
cb:f8:17:25:f7:d9:56:b7:93:59:1c:b4:2e:93:f0:49:af:76:
ee:81:d9:13:43:4f:e9:32:e8:f4:8b:9e:ba:67:8b:c6:a1:91:
bb:31:d8:4d:c8:5f:1d:d5:69:2f:2a:c9:a2:53:7c:68:a3:11:
90:d7:78:c4:84:6a:ea:64:24:32:63:d3:a4:a8:ae:cf:e3:b8:
94:fe:94:33:48:78:3f:2a:52:61:d8:43:3b:44:74:87:ed:5c:
a1:aa:cc:1a:5f:1b:45:c0:2c:a6:90:97:a3:a0:0a:d6:e2:6e:
00:a6:c2:9a:fb:b3:ab:a1:ac:51:43:b6:00:21:a9:81:b7:6c:
a7:cf:b1:a0:94:b2:75:6c:c9:82:30:7e:4c:e7:a5:35:ad:7b:
b8:5e:4e:49:8d:ab:8c:1e:e4:e6:46:36:a1:78:d1:b3:50:c3:
6a:ff:92:ee:c8:9c:99:14:77:be:80:7d:8d:1f:39:a3:b7:82:
62:91:f4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:39:32 2024 by rpki-client on console-ams.rpki-client.org