Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0mdB0x0o04Zd1Tgd-9C-ovZv8yM.cer
File: 0mdB0x0o04Zd1Tgd-9C-ovZv8yM.cer (raw, json)
Hash identifier: oPz4bu9effTMF8mplkYF2nODLCWAJkk/vqrxm2OfHLY=
Subject key identifier: D2:67:41:D3:1D:28:D3:86:5D:D5:38:1D:FB:D0:BE:A2:F6:6F:F3:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCE6E4A4D1C90AF8905E6CDAF78F02
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/0a51b7-6b5e-421a-bde2-c3da58b4ec4d/1/0mdB0x0o04Zd1Tgd-9C-ovZv8yM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/0a51b7-6b5e-421a-bde2-c3da58b4ec4d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:34:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208824
IP: 2001:67c:1804::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:e6:e4:a4:d1:c9:0a:f8:90:5e:6c:da:f7:8f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:34:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d26741d31d28d3865dd5381dfbd0bea2f66ff323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:6a:b3:2e:d3:b0:bd:6c:56:5a:c3:2d:e9:
c2:e0:2c:fe:ed:fe:65:fa:09:30:51:17:32:07:79:
b1:b6:c0:f1:22:f4:de:78:92:a8:27:56:47:b7:a6:
46:44:99:3b:fd:a7:21:01:d7:b5:83:b2:87:2c:21:
14:1f:e5:a0:9b:39:5c:a2:61:fa:f3:46:27:c6:8a:
76:b7:a7:37:82:a9:94:f3:e7:75:57:44:a1:77:03:
cc:6c:da:44:d3:91:04:ab:99:21:d9:c6:a5:83:d3:
73:3a:64:7d:de:66:e2:1b:27:a0:d9:d7:85:98:07:
52:a7:04:66:e6:81:15:fd:02:d1:44:e4:23:b6:4f:
f4:d4:18:88:31:ef:57:d8:ff:87:5d:c6:cd:e9:ef:
d9:69:17:25:b6:3a:54:22:0c:69:b3:14:2a:9b:a0:
a0:36:bd:43:03:d5:fe:34:4d:64:ae:8b:4f:64:f8:
ea:fa:74:24:89:d6:1d:95:09:c2:e7:8b:7f:73:00:
97:c8:2c:05:32:7d:93:b3:37:62:99:24:32:b2:71:
cd:9f:bc:71:fe:fe:38:95:f4:72:3c:55:6a:4f:f6:
4b:ed:ba:36:dc:96:d4:fe:7a:1b:7f:75:8f:0a:87:
5e:7d:a9:b9:5f:fa:44:13:96:8a:1f:20:1e:33:f4:
9d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:67:41:D3:1D:28:D3:86:5D:D5:38:1D:FB:D0:BE:A2:F6:6F:F3:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0a51b7-6b5e-421a-bde2-c3da58b4ec4d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0a51b7-6b5e-421a-bde2-c3da58b4ec4d/1/0mdB0x0o04Zd1Tgd-9C-ovZv8yM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1804::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208824
Signature Algorithm: sha256WithRSAEncryption
5b:32:5f:23:59:6d:67:a1:ef:71:06:84:6e:83:8f:cf:59:d4:
a0:c3:45:ae:58:3e:b4:c7:94:c5:2e:60:77:eb:37:3c:f6:ff:
00:94:00:46:2e:db:55:6c:a8:a8:d1:f3:ef:aa:5b:24:8b:e2:
96:34:9a:ca:de:02:6f:7b:21:8f:b6:02:73:34:a7:c0:36:3b:
e9:6c:48:61:ae:1a:1f:48:f8:23:e0:06:80:19:89:f1:67:d7:
9b:cd:6d:25:f9:86:6f:20:51:52:dd:3f:fc:d2:aa:06:d2:1b:
b8:9b:a9:9b:34:5c:1f:b4:7d:85:31:c7:41:50:ef:a9:d1:a7:
49:1e:83:fd:f0:ea:91:15:c4:a4:43:f0:ce:84:0e:16:7e:94:
34:1a:64:cf:89:1d:68:43:b2:fd:a2:10:93:f5:f8:bb:db:8f:
c6:12:23:48:f8:bb:0e:75:7f:41:32:58:78:e8:f5:c0:60:d4:
33:28:30:e7:f7:21:d9:e7:fe:ff:ad:3c:69:0f:dd:85:5a:d2:
0f:1c:c9:b9:82:66:ff:f5:46:b0:bf:a4:28:c1:d7:59:ad:18:
09:78:f9:ae:7c:c6:46:a3:8a:81:75:6d:30:f5:48:b8:c8:4f:
83:4b:b3:61:39:91:e4:b4:84:83:29:7c:3d:1c:59:c0:05:d8:
79:40:0e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 20:33:13 2024 by rpki-client on console-fra.rpki-client.org