Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.cer (raw, json)
Hash identifier: i6sc6qyaJOupqstD8V+6hzUbjUy1M/CwSUJ9WSwZ4GQ=
Subject key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCC4F227645BB554814C941E1362B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:34:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.158.164.0/22
IP: 2a07:ae80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c4:f2:27:64:5b:b5:54:81:4c:94:1e:13:62:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:34:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d103af197645a4941c6cdb08669af008b79102be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:80:f5:03:cf:81:09:a3:0a:3d:92:99:44:3e:
8e:1e:f9:b2:12:7e:cc:0b:9e:19:d3:48:79:08:cb:
8b:f4:a3:e2:9d:8c:74:43:3e:96:ed:6a:0f:72:15:
86:78:39:54:eb:ca:5c:bc:05:a0:b9:e1:e2:a6:e6:
2b:3f:87:b5:0a:64:88:ba:74:b8:dc:44:e0:60:17:
a2:86:29:e9:c5:4a:11:9d:13:76:46:57:57:c6:76:
67:40:20:eb:33:a9:e2:40:3a:d0:c9:e1:58:bd:bc:
0d:f2:ab:a8:7b:1a:22:58:d1:fa:ce:49:1a:f1:b2:
80:af:fd:83:d4:f6:5f:6d:df:ca:0e:5e:bc:0b:49:
d1:fc:80:ca:0b:7b:3e:d6:bf:2f:5e:5c:fa:12:c9:
03:78:b8:16:7d:3b:4a:2e:6f:a3:c7:e3:f0:09:5c:
ea:fd:46:a0:d0:20:1e:11:72:e4:8d:d6:f5:09:b1:
89:27:d3:82:7e:59:b4:32:04:cb:a5:d5:ea:53:95:
f9:bf:c3:f0:80:20:c4:62:1d:e0:5a:fc:92:29:9b:
3d:cb:10:53:8a:95:d9:55:4c:7b:f5:a4:a8:89:e7:
2d:cf:bc:f0:79:c3:bb:83:bf:55:5d:d3:e7:19:53:
9f:b3:dd:5b:18:e3:dc:ab:5a:cf:62:bc:47:23:ef:
30:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.164.0/22
IPv6:
2a07:ae80::/29
Signature Algorithm: sha256WithRSAEncryption
6d:06:50:f5:64:cb:91:76:8a:df:0c:bb:a6:fd:8e:25:66:ba:
de:c0:75:cf:5e:ef:f3:a6:79:53:de:d7:6c:0c:27:2b:3b:80:
5f:49:3f:3c:1d:c8:ca:f9:ac:da:78:c6:4a:cc:87:2f:c1:c0:
cf:cb:d0:90:96:c3:c9:aa:9c:a2:52:45:fe:cb:ff:a7:b2:a4:
d1:69:a5:5a:4c:fe:9f:54:36:f9:fd:05:24:1b:95:9e:ec:b3:
74:b5:cd:8e:49:e5:9e:5c:36:28:e4:6d:55:c9:aa:4c:19:93:
f9:d0:9e:51:fa:b9:1b:e6:63:1b:00:a9:d4:0e:0c:2f:18:66:
7a:43:83:39:b3:b7:1d:0d:45:c9:d9:e9:17:95:dc:3c:8d:37:
c4:d5:d5:70:e9:26:b0:29:43:a9:54:c4:e3:16:a2:2d:3c:4b:
2a:fa:ce:21:30:5f:f2:e5:43:b6:f4:7a:a1:7f:04:a9:68:35:
22:84:6b:5e:6e:df:6e:b1:94:72:44:93:b7:22:cb:92:6b:08:
aa:7c:d3:66:cf:54:b1:86:87:cb:33:94:f7:39:5c:e5:f4:7b:
ef:43:2b:f1:bc:ea:c0:6e:b9:e8:5a:e5:75:92:d3:36:1e:2d:
e1:a7:21:43:ba:10:2c:1f:c5:56:90:e4:28:12:9e:ef:05:33:
db:84:77:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 19:53:03 2024 by rpki-client on console-fra.rpki-client.org