Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
File: B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer (raw, json)
Hash identifier: BtaPP3HjRHdbiZtA1F8OLIHe7rkXFqoF3VHdBShBsWI=
Subject key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF874E22A9EEC2BFE03A7E06C64E5D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.14.196.0/22
IP: 86.104.26.0/24
IP: 95.178.37.0/24
IP: 212.118.58.0/23
IP: 2a0e:1480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:87:4e:22:a9:ee:c2:bf:e0:3a:7e:06:c6:4e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07ea4e88466de4c896094028f1cf0db665360d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:9e:74:11:12:70:70:70:69:81:bc:58:a2:
bd:98:a8:f2:97:8e:02:9c:bb:27:52:9b:f8:24:17:
2b:a9:6c:d1:9f:61:e4:2f:9b:ef:32:ea:8c:eb:42:
13:15:3e:76:7e:ed:fa:be:69:c2:23:56:59:5f:aa:
9d:52:dc:47:10:4b:3e:43:12:31:49:c1:a7:de:d2:
80:44:08:1c:e7:a6:79:7a:c3:1c:10:d0:43:04:f9:
f4:71:dd:07:df:19:f6:02:37:1a:7d:12:eb:c9:45:
9d:58:b3:bd:45:97:2c:af:51:f3:d9:92:e6:b7:93:
bc:72:1a:e5:60:0f:3d:6a:8d:8d:4c:cc:b8:87:57:
6f:9f:6a:26:c2:85:3f:d6:2f:3d:42:a4:8d:20:8e:
7f:64:35:ed:39:31:01:74:be:ed:f5:5a:37:81:1e:
1f:46:2c:fc:41:bb:4e:5b:84:98:ff:61:93:79:47:
df:42:e2:65:2c:ed:d3:24:eb:81:2c:8f:ea:0a:c2:
93:9e:69:18:9e:ae:c2:60:ca:f5:7e:d3:99:0f:41:
76:a6:bf:b7:9d:30:24:5e:10:56:6b:6b:b9:9b:df:
22:b7:1f:92:1c:ca:20:2c:72:62:7a:45:21:b2:ed:
ad:23:74:07:f9:43:d9:d0:c0:4b:5e:e1:dc:0b:54:
96:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.196.0/22
86.104.26.0/24
95.178.37.0/24
212.118.58.0/23
IPv6:
2a0e:1480::/29
Signature Algorithm: sha256WithRSAEncryption
3e:71:8d:a7:7f:2a:5d:df:03:d7:d4:20:76:50:cf:ac:c8:09:
5b:8f:0f:8e:a4:e5:f5:c2:f5:d3:df:59:c6:05:42:1f:89:eb:
db:26:30:09:5e:82:76:1e:27:38:ef:55:fb:b0:3d:74:20:c0:
77:c9:4b:e4:18:e0:eb:75:ae:62:7c:10:b6:15:68:b6:68:45:
fc:81:71:b1:3b:0f:62:a4:e1:60:ce:ff:b7:61:5a:ff:df:27:
6c:86:09:fd:4d:d2:bc:fa:ff:6d:d6:ff:a9:be:52:f5:a6:22:
fb:49:b7:e3:0b:f3:06:25:a9:4f:f0:f8:4b:e6:59:69:a3:b7:
1d:d2:47:b4:af:e4:aa:55:18:c3:f8:4e:ef:67:ef:0a:c0:86:
12:0a:3f:23:bf:93:37:27:13:26:f2:9d:7d:36:27:38:0b:dd:
36:e5:c8:a9:0c:49:a2:e8:02:79:04:09:ab:fb:21:6a:6a:63:
8d:08:7d:94:8f:34:28:bc:75:23:d7:1b:67:ca:8c:56:d6:b6:
6e:01:b3:36:9c:bb:5d:a2:6c:75:09:ec:18:62:86:7a:e6:2b:
f1:2b:31:01:23:12:11:d5:33:d0:65:b8:be:98:3d:53:51:b0:
e8:84:71:45:23:ce:d9:b3:a0:09:2f:2d:70:85:79:ba:b3:0d:
f9:6b:78:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 04:24:49 2024 by rpki-client on console-fra.rpki-client.org