Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
File: CBho7oTF8n2RadJDwze3S2_4wU0.cer (raw, json)
Hash identifier: pXtu6XuoojJrbeWdWLoGPSc7x3QQxrLMEm1uJwWDdx4=
Subject key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2B3497A1CFB35629BE056EE9BD9B34
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:34:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.140.136.0/22
IP: 2a07:1d80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:34:97:a1:cf:b3:56:29:be:05:6e:e9:bd:9b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:34:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0e:d4:1d:0b:9b:23:8b:c3:8c:c1:7c:34:66:
f6:cb:a5:0f:c2:e9:4f:f1:6d:03:d7:76:2c:3a:93:
ae:bc:c0:ac:19:52:a1:d6:04:f7:f2:e2:7d:5a:e5:
f0:a0:40:3e:15:93:7e:dd:87:71:66:42:7a:0e:c5:
90:a6:ee:f9:9b:70:53:87:cf:58:35:3e:eb:af:16:
5c:c5:6f:09:72:37:b2:a4:d4:db:60:15:e9:44:11:
e7:a7:ca:e5:ff:c7:17:ab:32:71:e8:a9:34:53:67:
da:d6:ef:1d:1f:35:9a:2a:88:4d:a9:4b:92:0a:3b:
bd:a8:41:4b:88:e0:37:99:89:48:4c:cc:44:9e:18:
a0:6d:01:8c:40:07:27:8a:39:2f:7f:61:3f:87:d1:
50:59:41:3b:ab:bd:31:3e:fe:2c:ec:08:23:e0:93:
6c:95:f7:06:99:f1:c3:8a:c9:24:72:b5:86:46:77:
67:49:14:42:1c:2a:86:4a:29:9e:1e:d6:5f:ad:fd:
42:fe:04:2f:7b:83:83:d6:d9:6a:10:8a:42:73:d4:
b4:47:9f:da:c5:9d:2d:b1:55:59:ba:77:9d:5d:9e:
65:4f:43:6c:e2:2b:9e:e2:67:ed:bd:35:b1:01:35:
bc:af:c3:96:c6:fe:0b:d5:4d:f2:49:ec:3c:34:25:
19:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.136.0/22
IPv6:
2a07:1d80::/29
Signature Algorithm: sha256WithRSAEncryption
8f:bb:fb:4d:a3:c9:4b:e4:5e:f6:a1:a9:22:44:1a:46:bd:47:
0e:55:ff:c4:80:ef:9a:b5:6c:43:d2:23:ec:a4:af:38:d0:9d:
ff:90:04:44:86:99:9d:bf:c1:80:b5:17:5c:b6:ca:58:a9:b1:
bc:b4:78:0b:ba:ee:4d:79:49:c5:5d:58:9d:06:5f:91:77:17:
a8:ef:75:d0:17:3f:53:a6:b4:83:61:c4:14:74:35:8c:8c:70:
79:da:b2:ce:0e:b6:06:b0:8d:4f:de:3c:15:41:78:f3:ae:5e:
53:78:8d:53:f7:a8:51:03:bb:fd:74:a1:dc:6f:bd:4d:e4:ba:
60:ae:33:33:24:91:93:47:a6:90:d5:d6:d2:04:ba:a2:bb:cc:
7a:86:f0:fd:77:06:c4:73:40:74:0f:9a:ae:6a:18:52:4e:bd:
58:97:90:e6:fb:ae:ed:16:0c:16:0a:42:5a:65:e6:cf:5a:be:
de:1a:b4:5d:02:7b:2c:53:6f:3b:61:9d:a6:4f:66:77:dc:b7:
c4:66:b0:ca:4c:8a:0c:b2:88:24:09:14:d7:f2:b8:2b:7d:ee:
c2:82:10:ea:a0:9b:24:a2:8d:2a:d2:46:51:38:0d:04:d4:e5:
d2:0f:41:18:d1:1d:78:72:06:ac:95:7f:96:cf:4d:36:83:82:
1a:a5:30:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 04:23:21 2024 by rpki-client on console-ams.rpki-client.org