Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CNOBziQjEGGBXzIEPGUiZq272GU.cer
File: CNOBziQjEGGBXzIEPGUiZq272GU.cer (raw, json)
Hash identifier: tMMNTlasSPD+vPuxUfp/OTtZS1Spcf1926iF8iymHUY=
Subject key identifier: 08:D3:81:CE:24:23:10:61:81:5F:32:04:3C:65:22:66:AD:BB:D8:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86FD712673E0F2857DA642C36251137
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/5b7ef8-e71f-429e-aadf-6cb78e95ab44/1/CNOBziQjEGGBXzIEPGUiZq272GU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/5b7ef8-e71f-429e-aadf-6cb78e95ab44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 176.117.104.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:d7:12:67:3e:0f:28:57:da:64:2c:36:25:11:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08d381ce24231061815f32043c652266adbbd865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:91:5f:91:6d:ff:01:37:e0:8f:3f:d5:20:
4f:7a:be:d6:e2:61:e9:c1:fd:2a:ab:6e:54:64:5a:
1d:ab:85:c9:40:91:04:be:3c:0e:68:b8:90:5b:e0:
8a:b6:ba:b1:d6:96:6f:13:f1:c9:4e:98:09:82:0a:
06:64:0b:64:44:cf:44:42:bc:9f:cc:78:ab:66:3e:
a5:b5:8c:c6:ab:9d:71:79:9c:b8:e2:a5:4d:73:50:
a8:ce:a1:93:7e:e4:30:f2:6f:a7:9d:4e:46:cc:d8:
75:fa:2d:71:0f:1e:c2:7d:a4:90:ca:83:2b:e8:fc:
72:57:f4:1d:eb:a7:c8:4f:26:8f:c1:19:18:2d:ba:
60:78:f8:e4:b3:b3:4e:f8:c1:a2:3c:ae:ff:6a:b1:
2d:b8:28:3b:eb:0c:89:ce:97:fc:cc:b7:b6:43:60:
5b:84:4a:0e:64:31:e8:96:d6:5c:7c:f5:82:00:94:
9f:7a:25:88:12:28:43:78:bd:68:53:f6:ed:d7:e7:
63:2b:bd:79:2b:e9:ea:5a:1a:9f:a4:7f:53:dd:20:
18:22:df:c8:fb:b1:87:f9:1a:8e:fd:2b:a6:e5:8c:
91:49:c7:42:ce:4f:63:da:31:27:7c:11:82:f0:5e:
d7:89:cc:bd:4a:51:cd:c1:e8:52:45:18:1c:33:9a:
1c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D3:81:CE:24:23:10:61:81:5F:32:04:3C:65:22:66:AD:BB:D8:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5b7ef8-e71f-429e-aadf-6cb78e95ab44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5b7ef8-e71f-429e-aadf-6cb78e95ab44/1/CNOBziQjEGGBXzIEPGUiZq272GU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.104.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:c7:f5:21:19:5a:d1:ae:ce:6a:c0:d4:07:61:0b:4b:d3:50:
e3:6f:a4:6c:6d:b0:d9:a1:43:32:0f:40:ee:29:67:fd:2a:98:
1a:c1:35:3a:21:4f:70:64:6d:ef:2d:6c:8d:44:ec:71:da:b7:
74:69:67:50:ec:9c:33:4e:d4:5c:fe:94:2a:da:89:5b:cc:a1:
35:7f:47:e6:e5:e0:1d:65:03:ef:cc:28:fe:71:bf:d3:ad:b9:
11:08:64:4e:f9:83:90:39:20:5b:bc:04:70:4b:d1:20:21:93:
d9:d5:1a:2e:70:1a:0e:bd:33:30:bb:74:a7:72:d8:45:7d:9c:
25:bb:2b:cc:5c:1d:ca:8f:6a:9d:ab:27:d2:88:7c:2d:b4:80:
04:2e:af:b8:ce:4a:d1:c8:c5:36:88:ab:6c:13:c9:e5:71:f1:
69:73:49:d9:9b:2f:f9:e5:12:97:cc:70:71:24:4e:f3:25:fd:
68:cb:56:e0:46:c3:31:6c:ce:de:bf:d7:64:3b:f0:de:81:f7:
b3:54:80:e8:ff:70:43:28:79:54:05:90:50:c9:60:14:b3:5f:
83:54:4c:88:23:d7:ae:54:8f:95:51:7a:e4:53:c2:e7:56:5a:
8c:18:f5:c4:21:60:3c:14:11:a8:1f:30:10:0e:1b:72:66:80:
fd:10:45:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:19:18 2024 by rpki-client on console-fra.rpki-client.org