Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
File: D0OG59TvxHLBH-nP7z0zCXSzP2E.cer (raw, json)
Hash identifier: a+GwEMZctSvQLgwT4ZzdxDOCjRcz1ns5p2tnpqAQT6k=
Subject key identifier: 0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34931AC37385CFEEE0BD9186030BAE3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.216.156.0/22
IP: 2a0b:b940::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:31:ac:37:38:5c:fe:ee:0b:d9:18:60:30:ba:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:93:3b:00:08:0c:4e:af:ed:16:72:d4:ce:fa:
e5:d8:1d:4d:24:e2:47:55:11:71:37:08:fa:52:9b:
23:d0:47:a0:ae:d9:ef:9e:4b:14:90:18:0d:72:32:
85:bc:ba:fa:a0:a5:ee:34:f6:c2:08:65:32:71:58:
04:ae:ee:e5:4e:7d:bd:fb:60:3e:c7:9a:97:aa:08:
64:a9:00:e1:f5:65:b9:b5:27:2a:77:1d:e5:8d:45:
40:bb:d2:ab:52:c0:6d:5b:b6:70:ca:a8:22:b9:12:
21:41:61:ad:f1:d5:77:99:8a:df:77:ca:7d:c7:08:
80:dc:0f:f0:6c:41:76:77:1c:2b:8e:e2:80:a5:e4:
73:1d:d9:33:d7:61:6a:dc:1a:d9:e0:be:6d:3f:1b:
33:0d:b7:0e:a6:6e:47:46:7e:0c:fe:64:82:18:ff:
c0:d8:67:40:9e:c7:6c:d7:3f:bc:80:a3:a3:e4:b3:
db:f7:a0:0c:04:c6:bb:bb:a0:16:72:f6:1c:d7:d1:
f1:48:c8:9a:28:3e:6d:b9:87:fa:46:ec:46:7e:a8:
90:66:9c:b3:28:bb:60:cf:3d:d6:6c:a6:d5:64:9d:
ce:e7:b6:de:f7:35:fd:2c:4d:5d:27:69:4e:96:90:
28:2b:6b:2c:e1:b2:95:bb:ce:06:e8:a9:38:e9:cc:
34:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.156.0/22
IPv6:
2a0b:b940::/32
Signature Algorithm: sha256WithRSAEncryption
43:22:c9:de:7a:4a:c3:c5:57:e3:da:a6:8b:52:4c:21:32:89:
ef:b3:a9:d3:85:d5:b2:a8:46:f0:5d:31:2e:37:d1:24:45:fc:
28:67:0e:ac:16:48:9a:86:5f:2c:04:b3:18:a0:ad:05:87:64:
1a:5b:4a:6c:79:8e:93:94:6b:08:06:93:57:af:be:e8:89:b6:
f5:64:fe:1c:eb:f9:91:8d:0f:70:71:f5:04:80:7a:e0:6a:43:
e0:c3:51:4a:e8:7e:e8:73:15:9e:2e:5d:92:51:15:b1:c9:91:
1a:b9:6d:26:77:c9:fb:bd:c9:82:67:78:bb:b3:3a:59:28:c4:
32:b0:2c:67:de:86:2f:9b:2e:a2:40:a3:30:2b:9f:72:07:2f:
8c:8e:39:51:32:e1:d0:41:ac:cf:1a:0f:44:99:4d:25:12:29:
ca:31:2d:d0:c6:b2:ac:3d:f5:c2:ea:83:ee:45:b1:78:0b:4b:
4e:76:a1:c8:08:46:a0:cf:cd:61:79:3b:0c:c4:d6:5e:42:13:
5d:c5:8d:30:7a:50:eb:74:a5:92:6c:8a:3f:dd:7a:92:54:97:
73:7d:f5:e6:60:42:91:0d:e2:f8:37:c2:73:af:95:df:e1:60:
af:94:d0:bf:4a:88:f5:16:d9:75:4c:f5:45:24:c2:07:86:2e:
4a:40:6a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 11:38:27 2024 by rpki-client on console-fra.rpki-client.org