Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0BdL5CbKRRE0N1Teo31qNgo0qbg.cer
File: 0BdL5CbKRRE0N1Teo31qNgo0qbg.cer (raw, json)
Hash identifier: apR33MrOTJ2fg/ltJ4Y/2qMqWZxP2VB7/XbmHqOZtqA=
Subject key identifier: D0:17:4B:E4:26:CA:45:11:34:37:54:DE:A3:7D:6A:36:0A:34:A9:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7934D1874CA09FD750E1AB05CE80A1E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/0BdL5CbKRRE0N1Teo31qNgo0qbg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.217.251.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:4d:18:74:ca:09:fd:75:0e:1a:b0:5c:e8:0a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0174be426ca4511343754dea37d6a360a34a9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c8:b0:37:a4:d2:2c:2c:c4:1b:90:ac:9e:ea:
5e:18:39:f4:d5:d2:32:bb:32:af:7f:a3:bc:d5:26:
f3:22:23:0c:aa:56:93:4a:45:f3:10:9b:cd:ad:07:
15:61:4d:0e:f2:d6:07:2d:8e:80:e6:ac:c7:33:df:
da:32:6e:2d:9c:a9:0a:ec:44:12:4c:47:4d:f6:41:
40:59:28:95:22:e7:03:32:4c:4a:8e:dd:e0:43:0e:
f0:41:44:43:f8:82:a1:fa:37:12:20:5f:95:5d:dd:
19:41:20:5c:97:2c:ed:95:9f:7c:03:93:7d:4e:24:
21:97:81:8d:2b:e0:53:a3:6c:16:db:ca:10:f4:5b:
44:b7:ef:d3:c1:86:46:ee:ac:3c:e5:05:99:c1:4a:
5a:26:d6:98:23:52:18:4f:ee:a6:08:ad:d6:ac:d7:
fd:6e:f6:04:cf:f5:47:39:1d:71:3f:39:29:dd:6b:
36:13:42:ee:f0:77:b0:4b:42:e5:6e:c6:a6:77:f9:
9e:cf:b4:af:df:3c:6a:32:a4:a3:31:a8:e9:ad:c1:
ba:d4:bd:94:6f:03:79:57:a8:2d:75:f0:c7:92:99:
49:6e:b1:d4:d5:f8:ac:d8:d8:fb:d9:a8:61:b0:cb:
7f:5a:0a:a7:1c:4b:b4:e1:26:8b:18:ec:f1:5b:4b:
2b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:17:4B:E4:26:CA:45:11:34:37:54:DE:A3:7D:6A:36:0A:34:A9:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/0BdL5CbKRRE0N1Teo31qNgo0qbg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.251.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a7:63:3a:e6:ce:b6:48:a7:44:03:ba:b5:26:31:8f:49:8a:
d0:fd:1f:70:4a:f0:37:07:fd:a4:d7:14:69:d5:01:f8:fb:f5:
de:fd:ce:f3:29:62:02:ff:7b:64:97:53:96:e0:87:4d:87:f3:
ec:b4:9c:0a:53:39:60:83:dc:9a:bd:6b:08:1f:5a:bd:b7:25:
f4:17:6b:bd:13:02:df:6f:2c:1d:08:e9:33:c3:6c:ce:b5:51:
33:3d:8a:52:c0:ba:ed:40:8e:fa:67:60:79:5b:36:92:33:0b:
e4:a0:bc:af:81:6f:a6:12:c3:ac:e5:2d:94:95:bb:e7:61:a8:
ab:40:bb:c1:5b:30:80:e5:bc:80:d0:90:c0:61:e7:a5:cc:82:
5a:d8:d6:3d:07:32:84:99:56:22:6e:3c:66:68:17:ef:5c:4a:
0a:d9:56:4a:6d:48:0e:a3:62:1a:41:18:01:0e:e5:ba:fc:56:
86:9c:dc:2f:d7:3e:9f:32:1a:eb:8b:88:39:35:45:f8:58:6e:
6f:e5:3a:43:78:8f:bd:1d:b7:a0:ab:1d:60:89:a0:e0:1d:aa:
6d:df:39:ff:0d:8d:ad:74:6e:25:6a:07:58:bf:b8:99:7f:74:
2b:a0:bc:1e:9e:19:8f:80:50:47:3b:ed:a4:3b:53:15:c2:5a:
85:40:76:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 22:40:10 2024 by rpki-client on console-fra.rpki-client.org