Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
File: 6oss0R-FmHiYVHRQySF4Efzeoos.cer (raw, json)
Hash identifier: rTt3JbpRrAbOJJFK24NWxPa3gtLZdAD3s4HqfpTGk4s=
Subject key identifier: EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8017B6B3237A9CB1AD6A5AE08F9D072
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 15935
AS: 28755
IP: 45.146.108.0/22
IP: 81.30.224.0/19
IP: 93.185.48.0/20
IP: 95.173.64.0/19
IP: 109.238.32.0/20
IP: 213.195.192.0/18
IP: 217.66.160.0/19
IP: 2a02:570::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7b:6b:32:37:a9:cb:1a:d6:a5:ae:08:f9:d0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea8b2cd11f85987898547450c9217811fcdea28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c3:47:c5:00:95:fc:9e:a7:38:bf:f5:7c:31:
29:32:85:95:ac:ed:fb:0f:f6:b2:9d:e1:60:f6:36:
7e:b7:81:f6:c0:a8:57:14:d8:cb:f8:68:27:b2:e2:
22:54:05:56:2e:de:35:7c:c3:40:dc:a1:51:39:01:
fe:68:b9:9c:80:5b:61:e0:22:1c:71:34:e2:cd:1a:
61:cf:0c:d1:d0:5a:21:e9:03:58:e1:ef:7b:15:d1:
e2:0a:67:c7:5b:33:0e:c3:71:2d:da:08:34:fc:c8:
ea:0a:23:c9:49:79:8f:3b:6a:f8:6f:ea:69:36:91:
7e:26:af:bd:07:e4:50:29:43:a2:db:65:48:6b:1d:
92:7f:bc:46:90:28:7b:d9:9c:d7:6c:de:37:2c:49:
9b:7f:b7:f7:54:7d:89:8d:ca:1d:62:32:cc:01:f1:
29:79:1c:5a:c5:4c:ab:d6:e8:d2:9b:80:0d:1f:34:
c3:6d:ca:c4:b1:c0:11:9e:d3:2d:53:95:77:48:0c:
0a:86:8f:9f:99:cd:77:df:3a:0f:d5:b2:38:12:fb:
9e:cc:57:79:4d:fd:fb:a7:2f:53:9d:df:46:35:6c:
82:96:e8:e9:6f:a2:ca:3a:fb:37:89:70:8a:66:f6:
10:58:73:85:63:b6:30:30:87:02:ca:08:7a:d4:26:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.108.0/22
81.30.224.0/19
93.185.48.0/20
95.173.64.0/19
109.238.32.0/20
213.195.192.0/18
217.66.160.0/19
IPv6:
2a02:570::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15935
28755
Signature Algorithm: sha256WithRSAEncryption
7b:a7:84:36:e3:77:1b:04:6c:1c:dc:15:89:0b:bd:aa:73:18:
5d:24:fc:de:b5:29:c4:fd:61:29:01:b1:34:62:c1:e1:71:62:
03:20:a7:70:20:90:f0:8a:16:a5:10:05:bb:97:34:b8:62:c5:
71:2a:3e:ce:62:4d:b8:7e:0e:32:a9:5e:b8:55:ea:0a:ad:15:
e1:3e:23:fc:95:51:d0:0e:64:00:82:bc:ee:2d:4d:c5:e2:79:
81:ee:3d:10:aa:e2:43:a3:92:ba:1f:26:59:90:7f:56:d6:1d:
c4:48:02:cc:26:99:5c:3c:ce:66:fb:7b:58:90:d5:38:97:8f:
6f:d4:87:37:8b:74:d9:b4:80:57:f8:72:72:cb:90:8c:dd:e0:
ed:1b:57:61:50:3f:c2:bb:06:26:50:d6:f9:4b:20:31:64:9f:
71:66:85:8c:00:ca:e1:98:65:59:08:fc:cc:62:67:22:d4:88:
a0:d5:31:4b:67:76:cf:a9:8f:c7:9b:7c:5c:65:f7:49:81:d8:
14:f2:37:f8:52:8f:fa:87:e7:24:b1:55:75:12:ef:e2:b6:03:
d6:d7:3a:3e:29:18:3d:cc:aa:27:32:46:5a:3e:21:55:d9:8f:
67:58:af:86:6d:69:fc:3f:19:f1:f5:f0:5c:d0:7b:64:27:ea:
8d:05:9f:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 25 18:56:56 2024 by rpki-client on console-fra.rpki-client.org