Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
File: 0RE68_NruSoPL72v47Zx9rn876g.cer (raw, json)
Hash identifier: hcN/x1fzJ8fCw6OCP5zPIM5dWbAXz1zePt7u3ttIlpg=
Subject key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA29549FCCCB9F4DBB6A6A47C1DD2E8B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42333
AS: 43334
IP: 185.202.228.0/22
IP: 193.25.205.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:54:9f:cc:cb:9f:4d:bb:6a:6a:47:c1:dd:2e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2f:8f:06:78:b2:a2:ef:74:e0:e1:45:7f:a5:
01:af:3e:7b:71:ad:2c:6b:9e:c6:ee:6b:bb:8f:38:
fd:22:83:00:39:40:86:b8:4d:85:0a:84:ea:90:b9:
4d:05:6f:08:c1:10:66:e8:34:83:a6:a1:ab:ca:df:
37:66:4d:65:77:5d:f1:25:17:9b:fa:4f:5e:b7:e0:
4a:7a:ae:ce:23:9c:ba:c2:e7:e8:7d:7b:0c:2a:a7:
2e:0e:63:c5:10:41:01:9c:c4:28:34:30:c9:9e:19:
d4:d7:18:a8:5a:2f:5e:b0:73:52:64:14:81:77:a3:
e4:c6:fe:4f:6c:06:15:74:b3:1c:9e:47:3c:b9:eb:
11:9b:f7:83:2d:e3:2a:f1:65:2a:2f:b4:47:b0:fe:
23:2a:f1:eb:65:17:35:00:19:f4:5d:05:f0:60:66:
1e:57:fc:61:c0:05:74:8c:17:f6:9a:e1:b1:e9:76:
11:5d:4f:c7:6b:13:dc:d0:41:75:b8:fe:e0:5e:23:
7a:c0:57:cc:30:1c:ae:cb:dc:89:4b:c6:f4:4d:9a:
69:1e:43:b8:df:9f:5a:89:25:33:5f:f3:03:da:7d:
fc:a0:a2:f3:61:a1:85:88:13:ed:7f:f2:48:5a:08:
f4:5f:3e:c6:e7:c8:8a:0b:65:6d:18:11:b8:22:97:
91:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.228.0/22
193.25.205.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42333
43334
Signature Algorithm: sha256WithRSAEncryption
8f:c5:e0:f7:bc:46:f3:1d:4e:2d:65:76:f0:bb:0e:7d:9c:55:
bc:07:0e:01:b3:de:65:02:4c:40:51:8c:f6:6b:c3:ec:7f:fc:
4d:c0:3a:fa:02:c1:d1:a2:35:df:b1:b2:55:d4:10:38:aa:80:
07:e1:0e:8c:8d:c6:5f:25:19:bb:a6:cc:28:e6:20:3c:3e:b5:
b7:85:f2:b4:ff:c2:3b:5d:49:fe:ba:6d:ba:38:df:06:30:fa:
fd:a4:f5:53:f0:f2:ce:19:05:0d:81:14:e7:e6:0e:d2:aa:7f:
63:21:81:bf:06:fa:dd:52:b5:01:32:87:05:ea:ac:98:1b:fe:
9a:c5:7d:e4:d1:69:7f:56:fd:46:39:ad:32:9b:3c:17:a4:7d:
4c:06:23:41:c4:3c:ba:bd:92:26:41:b2:b0:c0:97:96:4f:73:
61:5a:0b:cb:6d:2d:50:0b:51:bb:3b:dc:0a:c4:91:85:2b:15:
50:f0:7e:b7:fd:11:a4:01:6a:05:ea:97:cd:de:28:82:42:c8:
3c:f6:52:be:a5:e0:73:78:5c:91:14:31:8b:6e:2a:18:96:85:
95:f6:d8:dd:eb:40:7d:09:75:d9:b3:a1:41:0b:ed:dd:89:7e:
35:cd:0d:e5:c2:49:21:d3:14:aa:60:b7:a6:da:f8:73:35:39:
10:c8:63:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:20:51 2024 by rpki-client on console-ams.rpki-client.org