Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tDlkbascuAzWConx-qE0bzlSO_o.cer
File: tDlkbascuAzWConx-qE0bzlSO_o.cer (raw, json)
Hash identifier: YinNXqcaw10crMiZqBVLpTT42658fpa+prLdlO5Dnu4=
Subject key identifier: B4:39:64:6D:AB:1C:B8:0C:D6:0A:89:F1:FA:A1:34:6F:39:52:3B:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34914CF3944A9E4130CF29017B34543
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.150.200.0/22
IP: 2a0b:7bc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:14:cf:39:44:a9:e4:13:0c:f2:90:17:b3:45:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b439646dab1cb80cd60a89f1faa1346f39523bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1f:61:fa:42:3a:c5:4f:c3:a1:f5:22:6c:23:
3e:7b:58:fd:36:6a:e7:52:69:08:65:d5:65:68:e6:
2d:a3:13:76:97:ae:71:17:1f:5d:90:69:07:02:e3:
28:18:80:69:3a:a6:b8:c2:f7:c8:f6:95:92:78:c2:
4f:8e:2a:23:2d:ac:c6:ab:8e:ea:e4:59:33:fc:62:
13:fa:64:da:dc:f9:8d:5b:eb:0e:c1:a6:09:c8:ac:
21:4e:35:44:51:dc:5f:7c:82:67:c0:4e:d5:dd:fc:
a8:a9:ef:e1:de:30:b9:e1:db:93:86:dd:46:15:00:
5a:54:39:3b:a6:23:df:ca:f4:1a:ff:2a:5d:52:44:
06:69:1a:c2:2e:1d:d9:1b:3c:1d:7e:41:2e:9c:98:
16:c9:60:71:86:12:9b:c0:8a:f8:cd:00:86:a1:5e:
ea:4c:b9:fc:e0:8f:a0:78:9e:d5:7c:e6:83:cd:65:
f5:c8:96:79:79:d3:90:4a:ba:71:e3:aa:ad:5d:41:
49:96:c9:a9:24:97:77:4f:e9:7d:c9:d8:b6:fa:94:
7e:dd:02:dd:b8:cf:9c:8c:e3:a3:ba:84:d8:9f:1c:
7e:47:f3:4c:ae:b8:63:de:1c:d0:7e:77:0c:66:60:
d4:17:44:8b:23:5b:c5:10:08:a4:39:5f:e4:f7:e1:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:39:64:6D:AB:1C:B8:0C:D6:0A:89:F1:FA:A1:34:6F:39:52:3B:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.200.0/22
IPv6:
2a0b:7bc0::/32
Signature Algorithm: sha256WithRSAEncryption
aa:9d:67:1d:c2:9c:48:28:b5:54:48:a5:9d:21:e9:e8:a3:51:
c7:1e:47:46:d3:92:ee:47:8f:fb:89:b3:63:17:b2:11:2c:8d:
b3:3a:e1:bc:3a:3a:8a:c3:5b:81:bd:00:40:ce:8e:a7:a5:f2:
21:b0:eb:74:1a:bb:95:e9:66:86:5e:d5:9a:c6:33:82:77:06:
91:86:be:86:11:22:d1:2b:a0:5a:23:3e:a4:2e:5f:34:ba:b2:
fe:b2:db:5b:b2:ba:49:52:53:26:10:fc:46:2c:47:30:d9:9f:
9c:9e:c6:6a:d4:48:85:13:71:37:86:09:a1:ce:69:92:da:88:
89:13:22:13:be:13:a8:be:a9:78:ac:ae:b9:b5:a5:5b:8c:65:
1b:b7:7b:e3:6f:cd:62:a3:4f:42:2d:17:6e:6f:62:60:70:85:
4f:33:a8:53:45:5d:df:71:0a:39:c1:bf:37:b1:1a:fb:24:43:
38:8b:2d:d1:54:8f:3b:5d:66:e4:6d:42:e5:3b:24:4e:68:8f:
8b:2e:0c:a4:eb:d2:0b:98:61:e9:96:44:2d:e5:77:7a:f9:d6:
00:f6:13:8e:af:7c:41:a0:cb:4a:71:1b:4c:44:99:f4:6f:8f:
6d:46:1a:66:d4:1a:19:76:b2:1b:9b:15:df:d8:03:93:df:8f:
34:a3:7d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:17:00 2024 by rpki-client on console-ams.rpki-client.org