Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6oiYJZNmVznbsaYaaiDlbwviX7c.cer
File: 6oiYJZNmVznbsaYaaiDlbwviX7c.cer (raw, json)
Hash identifier: 66VJv2inovQZcWUqGbB6bBNkP/790GzHYqS6maxpMAU=
Subject key identifier: EA:88:98:25:93:66:57:39:DB:B1:A6:1A:6A:20:E5:6F:0B:E2:5F:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F966D7B69494949380C1A25C169DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/9cc5ce-8fba-4da6-834f-ea042c325f88/1/6oiYJZNmVznbsaYaaiDlbwviX7c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/9cc5ce-8fba-4da6-834f-ea042c325f88/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.157.240.0/22
IP: 2a0f:6480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 21:23:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:96:6d:7b:69:49:49:49:38:0c:1a:25:c1:69:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea88982593665739dbb1a61a6a20e56f0be25fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:e2:c5:09:67:aa:fc:46:e4:f2:95:22:8d:
0b:ab:80:4c:3b:f9:b7:a9:62:c2:3d:ac:90:05:8f:
7c:2e:59:c0:63:13:13:6c:44:23:71:fb:a0:92:07:
76:0c:60:4c:8e:39:b4:9a:43:aa:08:92:91:65:7f:
74:e9:7b:a9:7c:1f:5c:b2:b5:2d:31:25:33:a4:78:
c6:47:e3:52:aa:26:1e:ec:62:c9:20:7b:bd:84:5a:
6b:4d:53:c5:5b:0c:34:a5:0d:f1:44:04:f6:6e:50:
93:4d:2b:d8:4a:ab:b8:29:27:0c:f2:aa:ba:f5:88:
5c:3c:39:45:3e:ed:b5:da:be:af:d6:aa:7e:8f:21:
89:b6:b1:ef:0f:20:0e:c5:6d:cd:36:08:59:4b:71:
39:08:20:09:30:14:f4:66:34:16:b7:b7:b7:fb:0a:
ca:58:4b:82:e3:e8:64:b6:68:19:21:46:fc:94:62:
ca:fc:ff:a4:e7:d9:31:89:4c:79:4c:fe:83:1f:46:
bd:96:22:fb:9d:98:5d:3d:ae:6a:47:c4:91:e5:3c:
76:53:9d:70:d0:38:4d:18:5b:db:94:53:97:c6:ba:
31:a5:ba:eb:41:3f:75:4c:81:c2:0d:2d:0a:f2:c3:
ef:a1:62:0a:da:a7:1c:40:ef:7b:fb:98:66:3c:01:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:88:98:25:93:66:57:39:DB:B1:A6:1A:6A:20:E5:6F:0B:E2:5F:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9cc5ce-8fba-4da6-834f-ea042c325f88/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9cc5ce-8fba-4da6-834f-ea042c325f88/1/6oiYJZNmVznbsaYaaiDlbwviX7c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.240.0/22
IPv6:
2a0f:6480::/29
Signature Algorithm: sha256WithRSAEncryption
91:50:b3:7d:4a:72:b2:34:b4:5f:c4:d3:bf:ad:8c:04:c7:a8:
ad:3b:c9:b1:b6:f5:cd:47:ae:5f:c1:a4:e2:9c:52:bc:91:67:
2e:40:28:6a:6b:36:b4:54:38:cc:3f:11:58:9d:28:9e:da:cb:
0d:58:0d:8b:35:14:04:c6:00:2b:8e:9a:e2:80:dc:33:15:a0:
0f:38:1a:eb:b4:42:5b:5a:df:12:4c:95:2f:58:54:0a:73:43:
f8:7a:66:5c:34:49:f7:8e:3f:ba:00:c3:ed:ff:10:65:1f:84:
ab:50:dd:23:fe:13:76:3a:84:3f:65:54:d4:f8:09:52:ca:62:
c4:ac:7b:e7:4c:b5:ee:39:4a:a3:dc:c3:e1:26:85:e9:e8:3f:
02:e7:b8:66:db:13:a7:3d:42:2b:89:e4:21:1c:14:8b:ae:b8:
fc:cd:98:26:73:8f:f2:3c:24:68:51:41:06:84:5d:93:64:11:
8a:9e:7c:b8:f1:93:a1:5e:7c:e8:ee:73:60:1c:7e:05:5e:75:
f3:f4:90:4a:76:7d:98:35:0c:92:ee:22:5d:d1:01:03:f4:19:
19:02:f5:f9:b6:dc:91:18:0a:04:90:49:b8:0e:ef:94:a3:50:
48:5f:c1:01:ca:0a:d1:2e:29:07:39:c1:80:9d:7b:99:1c:2c:
eb:7f:1e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 00:10:23 2024 by rpki-client on console-ams.rpki-client.org