Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
File: C_O8-guoLZPRT4VYcCen53NRGmE.cer (raw, json)
Hash identifier: S74Gl3fBOpLjfENpl+DNC8/i7K1Wk4IikBYU0UFNabU=
Subject key identifier: 0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DA2880B33293A24E2218EAD97BE77BB06
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 13 Feb 2024 12:54:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.142.244.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:88:0b:33:29:3a:24:e2:21:8e:ad:97:be:77:bb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 13 12:54:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:2e:e7:c4:3c:72:06:d3:ee:cf:a8:b3:4a:
4a:56:2a:92:3f:f7:83:45:83:8a:64:d1:fb:30:0f:
0e:b5:63:c9:cd:0c:99:ac:4e:f5:8a:88:20:82:b4:
d3:86:2e:2c:06:5f:83:b3:c8:0a:cc:4d:97:82:e8:
7c:f2:70:2e:df:b4:df:7f:eb:5d:8c:17:d7:cd:ef:
b7:d0:8a:97:b6:34:b9:ce:c3:78:32:04:66:61:07:
3c:a3:51:e1:30:f0:13:1d:0a:12:ea:8f:10:22:5e:
bd:fa:e2:66:d9:c3:db:5f:c3:ca:09:65:1a:d5:c4:
96:a7:53:d1:5d:26:5e:e3:04:54:68:28:f1:f9:b2:
6b:7f:55:03:f6:25:6f:d5:0d:ce:48:40:0b:71:c6:
0f:d6:13:a7:51:4d:33:1a:38:64:ad:a7:c7:22:5f:
d4:04:d6:59:e4:4a:d0:11:01:d5:c2:e0:c7:3d:1f:
7c:f8:4d:10:d1:3e:f2:8c:99:fa:c8:d3:e9:80:67:
ad:41:9c:80:fc:f1:dc:33:04:8d:4b:4a:63:50:99:
5a:0b:e9:fa:12:56:d4:99:c6:40:57:e9:69:f2:7f:
60:8a:48:89:68:f7:09:b6:ba:f6:b1:89:f5:e3:2f:
1d:07:4f:bf:97:85:af:f5:d2:f6:f4:ec:53:e7:f4:
d5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.244.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:cd:2b:1d:3b:0b:f8:98:80:6a:ee:e4:7b:06:66:bf:2f:aa:
87:f1:70:bc:f3:d3:d0:a4:02:1a:70:9a:3a:41:d9:d2:3d:da:
84:6c:6d:73:09:a4:e6:63:55:ab:6b:39:c9:43:34:98:27:6f:
64:59:94:7f:ec:4e:8a:aa:fb:4a:f0:67:7d:f5:35:40:25:30:
34:a3:80:d5:46:f7:52:86:c0:9e:4c:be:5e:26:54:5e:e1:99:
71:f8:48:16:22:55:63:97:ac:8c:71:91:96:61:04:26:07:59:
86:d7:6f:17:ca:8f:ab:54:1d:b6:cc:f5:d1:e0:7a:63:4d:95:
d7:a3:1e:a2:c9:85:27:98:a0:01:c2:50:99:bc:f0:6c:63:7b:
be:6b:b2:c0:00:b6:d2:c0:da:96:db:67:90:13:2b:99:f3:85:
99:b0:58:15:5e:39:09:e9:9f:13:40:1b:ac:88:a9:b6:ac:f7:
ba:d4:af:8a:60:9b:da:bd:52:c5:e3:cf:d0:45:fe:38:03:b9:
20:bc:67:86:46:d0:32:41:4f:90:14:eb:b0:14:2d:d7:ee:99:
fd:d1:81:5f:11:a2:d9:ca:2f:3c:a7:12:06:28:85:6f:3f:ae:
a7:3b:f4:55:b4:ff:43:ed:fe:78:dc:35:04:28:30:07:c0:94:
5b:8d:84:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:45:34 2024 by rpki-client on console-fra.rpki-client.org