Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
File: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer (raw, json)
Hash identifier: cr6Ip2KX4F95FkYYv9g0ac5zgOa0wZopDfgZX3CMx6Q=
Subject key identifier: D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2B6E15D53BACECA6793AC91922B7C9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:34:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.19.248.0/22
IP: 2a03:9a80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:6e:15:d5:3b:ac:ec:a6:79:3a:c9:19:22:b7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:34:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:84:78:61:9c:f2:24:5a:c3:f1:c9:0c:ac:
22:ad:9e:d5:fd:9d:0e:e3:ee:47:23:83:a5:38:7c:
98:7a:4a:60:3b:7f:3a:73:ac:07:f2:e3:61:65:31:
a8:49:fe:9c:53:fa:ca:01:7c:74:a3:77:14:9b:a8:
23:ac:71:52:95:2d:d4:9e:b9:50:32:96:7b:b5:3c:
c9:17:50:54:59:7e:c0:da:50:63:fd:3d:12:05:8b:
42:94:ca:3f:7a:03:ae:4f:1d:ad:70:1a:76:40:af:
f9:01:e9:d1:96:75:1e:22:76:89:e0:b6:07:3c:c3:
45:66:a3:f3:1d:5b:37:04:b8:2c:fc:05:6c:38:c7:
5c:1a:dc:a2:1a:90:6a:35:5d:46:c3:87:7f:84:cd:
47:b8:3a:5e:6d:cb:55:c2:6a:38:13:10:4a:ed:30:
09:7d:9b:39:c7:cb:80:3d:95:68:f1:05:91:cd:9a:
f4:fd:1f:4d:96:84:e3:28:1d:1a:b2:80:ad:8f:af:
01:ac:bf:72:09:25:73:31:2a:e5:8c:bd:20:bf:18:
e1:2f:cb:2a:5d:78:bb:ec:a7:47:74:8e:f2:e3:66:
34:53:a7:a3:85:34:2a:e3:5b:9a:4d:2d:52:2d:45:
d2:5e:0b:ec:36:55:8b:23:cc:da:f1:11:ea:23:cb:
2e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.248.0/22
IPv6:
2a03:9a80::/32
Signature Algorithm: sha256WithRSAEncryption
7a:d8:e3:01:57:62:61:3b:e6:63:de:23:b7:e9:2a:d3:2e:15:
9c:d3:0d:0a:52:c2:17:0b:94:d2:15:ce:ed:8a:22:03:21:89:
17:91:38:bf:bf:b7:89:2d:da:61:c8:91:e5:ae:19:c1:1c:a5:
22:d1:ff:86:66:7a:56:14:0a:59:f1:e6:9a:81:47:49:8b:d4:
fa:67:44:26:d4:e8:3c:ce:74:17:36:fd:82:90:9a:f6:e8:13:
84:7a:68:e7:e5:95:1c:21:cf:ce:71:20:35:17:fd:2f:10:c5:
e4:c4:52:d3:74:fa:14:6d:45:f6:69:0b:0b:2f:f5:1b:73:8e:
0d:a1:77:c3:ae:fc:2e:23:6b:32:12:a8:38:1b:15:b9:2c:5f:
e1:69:58:62:8d:2c:fc:d6:8b:fb:67:ba:a7:78:1b:96:8d:16:
c5:cf:b0:c5:af:9f:16:ba:b4:bc:1b:af:68:47:9d:4e:69:33:
e3:b9:46:e5:ac:3d:cf:08:0d:35:86:93:51:10:33:a8:40:3d:
04:fd:61:cd:9f:04:21:07:66:5e:cd:0c:24:c8:0f:8e:31:2e:
c9:f8:df:3b:b1:42:6c:63:9e:d2:00:c4:5a:9f:81:1f:08:5e:
07:43:f1:be:be:c5:23:11:71:32:98:2d:b6:72:5b:95:28:0d:
3d:e4:ea:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 04:10:54 2024 by rpki-client on console-ams.rpki-client.org