Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
File: 8oB_KA2plWnsokNGur6dyFrBMkA.cer (raw, json)
Hash identifier: yrCSngIEdjFTsQsm5bvEIbsPM5TfhSPeKM7a+y7k0FE=
Subject key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6E44BCFECAD0B8B682C1BA7E89127
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 62.93.128.0/19
IP: 2a02:e38::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e4:4b:cf:ec:ad:0b:8b:68:2c:1b:a7:e8:91:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2807f280da99569eca24346babe9dc85ac13240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:42:8d:d6:17:13:ec:9d:34:a7:99:08:1b:
e4:51:a3:ee:17:c9:5e:ba:2c:58:e4:27:86:fd:2c:
f0:14:ed:c6:50:eb:cc:b9:0f:c6:28:cc:01:f1:ad:
59:5e:7e:d9:c1:b5:47:56:d3:bc:0b:05:55:51:c1:
e8:b4:fa:18:25:bd:13:1b:9b:2c:2e:35:23:97:9d:
7d:33:f0:9b:4d:68:99:5b:7c:cd:72:aa:b9:5e:fa:
93:b8:24:a3:65:f2:c6:d9:24:ce:fe:57:b5:bf:36:
e5:d0:2a:53:17:fc:2f:6f:dd:8f:cd:5d:c5:6f:63:
d7:22:1c:1e:13:2e:f3:f2:0e:0c:d2:0a:e7:2e:ed:
8e:a7:b4:b4:ac:13:61:46:53:63:da:06:2c:4b:22:
ac:cc:84:35:c8:bc:f0:d9:2c:4d:ab:57:ce:06:c0:
0c:65:ce:3f:ab:a6:84:61:26:df:54:3d:e3:96:12:
d2:11:f9:18:52:93:74:9e:1f:41:70:22:e1:96:f9:
4d:01:ea:c4:83:d9:08:8e:62:77:c9:aa:24:dd:c4:
68:d7:8c:73:fa:00:ea:cd:ef:86:17:3a:bb:70:0a:
21:a2:86:be:a3:17:5d:e3:c7:fa:7c:8a:ad:c2:e2:
b9:46:c0:f0:c7:0b:5b:af:64:f5:dd:d3:90:9b:bd:
9f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.128.0/19
IPv6:
2a02:e38::/32
Signature Algorithm: sha256WithRSAEncryption
ab:27:db:a5:23:16:db:be:50:36:18:16:89:92:3d:e9:45:77:
8d:f7:56:1b:7b:61:0f:ec:c4:44:d2:ca:c7:91:cc:5d:f6:cc:
fd:a2:c4:5a:31:35:e5:1b:56:cd:f2:64:93:9a:ad:87:8a:e4:
23:fb:5c:9d:82:42:47:7f:54:ac:55:dd:d2:4b:45:66:bb:b3:
f1:e4:90:48:f8:85:7b:ef:44:7a:d4:b6:83:71:21:d9:43:2f:
d6:63:79:b8:22:10:49:da:10:18:c1:5e:f0:e9:f7:1b:2d:df:
89:71:f9:c1:6f:90:43:56:36:32:35:1e:8f:4e:af:80:79:1b:
ea:cc:c7:d4:d1:d6:69:20:ee:60:45:9d:16:a4:75:e6:d3:b2:
d2:30:92:f1:14:5d:ab:9d:30:5c:9c:01:6f:e7:f5:fa:86:1c:
f5:f2:45:48:a9:2d:27:34:32:9e:07:3f:6d:ee:79:e3:a1:67:
24:3c:b5:1b:ea:2c:15:8e:81:64:68:2f:38:1d:00:ce:a2:a4:
d5:8d:23:33:57:a0:76:23:b9:8c:c6:24:a8:04:aa:01:4c:d4:
3d:4e:c9:fb:f9:84:f2:bf:68:27:14:66:dd:08:fb:1a:26:30:
b1:93:93:54:31:19:59:20:81:82:77:fb:c1:65:8c:f1:c4:38:
6e:3c:5e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:25:39 2024 by rpki-client on console-fra.rpki-client.org