Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
File: 6_OFztCQ2_HQRHNOEqJw7muEHJY.cer (raw, json)
Hash identifier: lB6iyO5J9LXWGijRYihB0iZcuA1nZTl1evbLS7h3v1w=
Subject key identifier: EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D3C035907348356DCD73BF159F8CCF033
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 24 Jan 2024 15:07:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.141.88.0/22
IP: 2a0e:cb40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3c:03:59:07:34:83:56:dc:d7:3b:f1:59:f8:cc:f0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 24 15:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebf385ced090dbf1d044734e12a270ee6b841c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d9:97:88:4c:76:a0:6d:34:61:92:16:82:e0:
1c:c5:84:55:ee:f0:32:08:8b:fb:e2:21:06:42:e3:
b8:66:e2:95:6c:53:f1:fe:21:e9:d8:66:df:f9:bb:
b8:8f:5e:bf:f3:6a:7a:83:74:68:0d:04:36:a0:af:
1a:e7:2d:62:fc:f3:e1:8a:13:3a:03:98:37:69:38:
e0:5a:5d:87:83:79:d5:1b:c3:58:de:9a:11:1e:e2:
11:67:bf:66:3b:3f:43:0d:0c:a8:7c:ed:3c:a2:a2:
7d:89:36:cb:54:c5:80:9e:39:34:6d:ff:73:83:c3:
34:6a:bd:0c:a0:f5:bc:99:06:e4:5b:97:c4:03:db:
ed:fe:e1:80:ab:e4:48:1b:ef:aa:76:59:94:b6:21:
ea:f8:76:bb:7b:06:b3:e2:c2:9a:62:97:24:62:75:
a4:d5:36:48:79:04:c6:c7:8d:30:48:cc:7b:c8:66:
ff:2d:84:3b:52:41:cb:dd:cb:4b:cf:12:6d:c0:12:
a0:db:98:0c:c5:0b:82:b3:93:f4:d4:36:42:8c:30:
3d:9b:9b:3e:4f:cf:f7:34:be:d9:65:7b:93:91:64:
9b:3f:70:3a:03:51:ca:6e:f3:8e:79:c8:4d:ce:9e:
90:87:54:89:05:ec:4d:9c:77:4b:a8:95:f1:2b:df:
78:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.88.0/22
IPv6:
2a0e:cb40::/29
Signature Algorithm: sha256WithRSAEncryption
55:01:96:ef:b4:a8:d5:27:80:db:0c:ab:e1:3e:a2:f2:a0:09:
1d:cc:71:86:88:15:73:99:6a:fc:b0:6c:ce:3e:62:5f:93:b4:
f0:b5:b8:e0:af:17:e7:af:26:28:b8:fb:ff:42:81:34:dd:d9:
a2:70:1c:32:2e:9d:bb:4d:e8:e6:bd:38:68:d2:07:f1:1b:1f:
59:1a:69:9b:56:99:04:2e:d5:07:1a:59:9c:8d:36:5c:27:08:
07:96:30:a1:7c:22:b6:cf:3d:f1:30:57:c5:f8:e4:f0:06:8a:
28:6c:6e:ce:a4:8d:e6:50:6d:22:d1:8c:ea:e5:06:b9:eb:c0:
67:c2:35:7b:f3:01:35:e0:25:b1:fb:40:3f:98:08:38:60:5f:
db:be:1a:8e:cb:d7:36:b2:3c:aa:b7:c4:c6:bd:57:5d:73:a6:
b9:3a:4c:da:46:76:c1:a3:6d:86:03:f1:7c:bd:36:a5:45:17:
ae:63:83:40:a4:bd:32:25:5b:c4:30:a6:98:6a:39:6b:46:b6:
27:0b:f5:a2:20:fb:52:12:ff:5f:db:0c:3e:f5:cd:a3:e4:bc:
ce:02:51:57:d1:d9:9e:55:49:a0:a5:07:39:6b:47:6f:82:f9:
14:ad:6c:97:20:ff:ed:09:ca:df:4c:cd:b6:0b:d8:c6:39:d9:
ac:b4:52:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:46:20 2024 by rpki-client on console-fra.rpki-client.org