Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
File: 2okNBdXIi33m9bqkwdCF_nMB9dU.cer (raw, json)
Hash identifier: XR0I1KvUlzkMkFn8QZM0GNA0Wk2UT18zE2wfsYyx6kk=
Subject key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E0532CCD4BD6FEA3908944EE4B966
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.0.235.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:05:32:cc:d4:bd:6f:ea:39:08:94:4e:e4:b9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:4c:7c:dd:a3:62:98:0e:2f:97:73:cd:bd:
98:8c:4e:d6:7c:1f:a0:f9:8b:81:d4:c2:a3:a1:8e:
ef:85:92:fe:23:6a:5c:8a:83:6b:a6:93:5a:fb:40:
8b:52:28:99:49:b3:91:0c:37:ed:06:70:d2:c1:b9:
08:ae:4e:6c:96:13:43:ac:d3:12:f2:ef:47:9b:7e:
36:cf:dc:9d:d3:8b:14:5a:e8:a0:48:26:d1:10:67:
91:59:00:d3:b8:20:46:1c:cc:fb:78:23:e2:81:b4:
a7:fb:b8:a0:fb:0b:a3:d1:c8:5a:0f:e4:bb:f6:61:
9a:c1:78:85:fc:d1:8d:db:ad:36:16:de:f5:61:f2:
5e:11:42:5d:f0:d0:49:93:7b:0c:ed:f2:f7:fb:ba:
6f:be:cb:ba:4d:aa:73:74:90:e9:67:41:3a:7d:d5:
e4:95:d0:f3:ce:52:ff:26:ff:07:96:84:b7:18:5e:
48:7c:f5:f1:22:75:0e:0e:a9:ec:ad:23:09:6c:0d:
f7:77:e3:7d:cd:e8:39:08:df:5e:70:23:c6:a2:87:
b6:c8:c3:17:04:cd:54:6b:0c:d6:54:cf:00:b7:77:
41:e1:bd:d1:a0:5b:ed:ec:8f:80:8c:80:8e:db:e5:
a1:35:30:8b:96:04:f1:77:3f:b5:d0:7c:39:b0:ae:
2d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.235.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c6:4f:d7:38:36:fa:99:87:52:64:9b:e4:b1:33:76:89:6e:
af:fc:69:8c:f6:b2:12:38:eb:f7:b0:eb:74:5b:1a:fc:7e:6f:
8d:23:40:75:83:fb:2c:34:97:80:94:2b:be:d9:3d:e9:10:01:
cf:ae:52:e0:37:c0:89:8f:5f:09:4c:1d:e2:1e:66:95:b0:0f:
01:04:1c:5e:1f:2a:36:95:cb:e7:cb:e6:1b:8e:22:af:ba:92:
d8:e4:97:72:ff:9f:22:c7:f8:74:f9:dc:b4:ac:ff:38:6f:7b:
f8:43:49:5d:f6:77:a6:56:b5:71:e1:27:96:17:8a:f3:44:b8:
42:a9:72:fc:7a:14:8b:a8:d3:68:f4:b0:35:6d:c2:2d:e6:c3:
90:c1:87:c0:b3:9d:8c:e9:b4:cc:ad:ff:9f:e1:68:e4:ed:ee:
20:70:93:ad:19:cd:10:50:75:25:6c:17:93:26:0d:99:40:87:
a0:70:1b:8f:3f:a5:8d:96:c9:2f:a9:ca:39:7b:6f:bf:9a:8f:
12:35:f0:34:64:3f:76:52:20:0d:ca:00:10:04:33:2b:7e:00:
de:1f:d5:6e:ef:5e:cc:2d:e8:07:49:f0:da:86:24:5b:d7:6a:
6a:47:75:de:75:ca:06:ef:33:c8:e9:50:02:d4:3d:b7:ee:56:
5d:3a:ff:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:23 2024 by rpki-client on console-ams.rpki-client.org