Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
File: t4Z4vWVMprEKXHc7wml1TcI0z9U.cer (raw, json)
Hash identifier: mbiaqLgjluFcsrQQP9pqYqVnyMHRneYINvWG/XngUW0=
Subject key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E5C4D44B0A945DA6B463B7E222A9CCBEA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 20 Mar 2024 14:39:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2.59.244.0/22
IP: 89.38.216.0/21
IP: 103.95.124.0/22
IP: 103.132.4.0/22
IP: 103.204.220.0/23
IP: 185.124.100.0/22
IP: 185.250.76.0/22
IP: 192.140.228.0/22
IP: 193.36.96.0/22
IP: 2a0c:8c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5c:4d:44:b0:a9:45:da:6b:46:3b:7e:22:2a:9c:cb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 20 14:39:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2c:50:20:91:e9:b3:49:60:a8:7f:68:13:e4:
c5:7b:61:be:bf:5c:9e:fc:66:8a:0d:f9:7b:b8:87:
38:13:c8:60:66:f5:b9:fa:65:44:51:14:aa:1a:9a:
26:20:b9:0d:61:fc:92:cb:06:5c:93:a8:5c:e2:4d:
43:df:d9:ad:49:50:91:4c:70:b0:f5:74:f1:f5:13:
3e:d5:81:ca:ba:37:5b:13:a2:e5:88:34:ba:c5:da:
54:7f:39:58:43:73:21:3f:09:d9:84:18:2e:b5:b6:
09:e1:e9:4c:f1:98:51:6b:c3:ec:17:fe:c4:01:85:
2a:3d:9b:cb:2e:2f:00:06:86:83:58:76:6d:0b:de:
c4:34:9c:3c:ed:ed:c3:84:0d:bf:78:27:51:c1:58:
73:7b:c5:d9:f7:d4:6c:99:49:c1:98:6c:b8:1a:ca:
df:d9:ab:f8:46:32:52:ca:58:6e:d4:d9:78:64:81:
57:f7:0d:c7:93:8b:24:97:4a:9a:e9:2b:d6:4c:ee:
e4:19:0b:f1:67:45:bd:5e:df:ec:87:81:5b:95:c2:
58:b4:a6:e6:03:05:08:89:e3:e5:9d:33:86:6a:58:
06:c2:8b:75:cf:9a:3a:81:c4:a6:d7:0f:d6:68:bb:
03:eb:f4:48:b6:3e:2b:d3:e0:21:9e:78:26:25:6b:
7c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.244.0/22
89.38.216.0/21
103.95.124.0/22
103.132.4.0/22
103.204.220.0/23
185.124.100.0/22
185.250.76.0/22
192.140.228.0/22
193.36.96.0/22
IPv6:
2a0c:8c0::/32
Signature Algorithm: sha256WithRSAEncryption
14:42:0b:5e:dd:d3:c3:63:49:b6:7a:d4:11:45:c3:1b:52:71:
e9:de:96:43:91:99:a8:8b:3b:71:5c:31:4b:22:f7:b2:d6:ec:
e3:4f:8c:42:fd:d1:e4:2a:6b:b3:29:42:de:63:dc:c8:4f:f2:
04:69:2e:43:7c:e4:39:13:c1:19:90:77:95:15:6f:39:af:20:
1d:db:02:8e:8a:2f:53:76:18:7c:81:c1:38:4f:75:a0:49:4f:
c6:bf:91:e2:c3:c7:16:b7:9b:b4:13:71:91:c8:76:65:cc:45:
a2:59:ca:b6:5a:37:d9:22:fc:6f:88:f4:4b:76:fe:46:9f:c2:
1e:6a:6b:52:fb:c9:ee:ad:d7:0b:de:85:97:7e:ad:14:c8:5e:
c7:f5:e5:28:bc:0c:74:66:a1:0a:c0:96:7d:bb:b5:e2:76:d8:
d2:c7:01:37:1e:88:cd:4a:8e:ba:dc:b0:4d:47:e9:8d:3f:d0:
6a:bc:9e:d9:76:ad:a9:e8:7e:15:3f:f8:a7:57:f8:74:ce:0f:
1c:81:e6:df:e9:6c:3d:82:58:be:fd:64:02:d4:55:fe:c6:a7:
ec:e5:d6:b8:8b:66:63:18:b2:d4:51:3f:ff:b1:33:57:4b:88:
46:2d:c8:55:08:36:e2:83:e6:a0:c2:56:e7:d7:8f:be:f6:88:
3b:82:ae:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:47:10 2024 by rpki-client on console-fra.rpki-client.org