Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
File: OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer (raw, json)
Hash identifier: w1BkPcKmegpIk+SvR5ty04kQbByOLc/s4Nhfh7fLlMU=
Subject key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2BD733509AFB956520D751D5D93696
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:35:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 85.204.248.0/23
IP: 86.107.180.0/24
IP: 94.177.148.0/23
IP: 185.186.128.0/22
IP: 188.213.51.0/24
IP: 188.214.151.0/24
IP: 188.241.69.0/24
IP: 2a10:52c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:d7:33:50:9a:fb:95:65:20:d7:51:d5:d9:36:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:35:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f5:ad:ec:f7:4e:84:12:24:c5:3e:ab:8e:59:
32:39:7a:cb:8e:5e:15:c0:32:82:53:47:25:21:f4:
e9:26:09:22:78:6f:81:5c:b7:19:3c:e4:58:06:4f:
03:0f:a8:9c:86:e4:4f:9a:d5:ff:01:8f:98:e3:3d:
61:14:7d:fa:80:ab:2f:2b:91:be:12:10:fc:47:52:
c9:ce:a1:d0:14:b1:ea:d2:f5:e0:fb:2a:9b:ff:f5:
ea:57:5d:39:d3:33:6d:b2:9c:78:0a:21:4a:9f:13:
d8:83:25:40:18:ba:7a:63:68:a4:01:3d:59:0b:e1:
88:fb:9a:8c:83:e7:c8:9a:dd:f8:91:b8:12:97:f5:
35:62:4d:83:e1:ac:fb:27:c2:ae:7d:37:0c:3a:ec:
d0:2c:39:3f:fd:60:2e:21:2a:49:d2:66:f4:86:fd:
20:e9:0f:73:8f:63:e1:26:e5:c7:15:40:8b:4e:ec:
d2:99:e6:10:14:10:d9:02:cf:61:ce:29:4b:06:c3:
f7:5e:a1:15:4a:d7:ac:41:fd:20:ce:21:94:6c:e6:
87:95:f5:47:1e:59:48:5e:10:b1:cc:5c:20:cd:45:
fb:7c:5b:6a:c6:2a:5b:40:2b:bc:f9:36:eb:16:fd:
0e:53:be:fd:fc:55:2a:26:18:47:b7:77:0d:c5:ff:
5a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.248.0/23
86.107.180.0/24
94.177.148.0/23
185.186.128.0/22
188.213.51.0/24
188.214.151.0/24
188.241.69.0/24
IPv6:
2a10:52c0::/29
Signature Algorithm: sha256WithRSAEncryption
8c:47:d9:0d:bf:eb:71:e9:6d:f3:5a:e9:37:b0:77:49:ac:53:
b0:e7:ed:6b:65:cd:d3:1b:a5:69:9a:28:af:a2:ac:8f:37:ae:
37:fe:65:34:e9:38:a3:f2:2c:30:d2:c6:29:4c:7b:d4:2c:87:
44:b8:0f:27:d1:4c:90:bc:1b:44:46:1a:e1:bd:cd:1f:46:3a:
9b:cb:21:0a:bb:55:31:6a:84:c0:76:06:e6:d3:af:c1:bc:bc:
cf:5a:60:d4:09:dd:f5:85:f3:93:7a:a1:55:ef:33:a2:c0:6b:
0e:12:59:df:71:d1:a0:b2:a0:ca:34:88:a1:62:4d:4e:58:f9:
26:46:9e:7b:53:49:0e:8e:95:a7:a7:7d:6c:90:9a:70:da:b8:
25:6b:e8:b4:91:d7:e6:16:83:04:eb:6b:6e:56:7a:5f:29:71:
b6:ca:75:ba:ed:5c:39:1c:b3:aa:30:d2:28:10:21:07:f8:e7:
04:37:6e:e5:59:f1:45:96:fb:d0:b1:aa:a9:e9:ff:5f:fe:98:
c9:a3:ec:4e:43:f0:ad:0d:e4:04:35:3d:17:85:15:8b:74:a1:
da:ce:cb:c1:cd:17:55:d4:8a:fd:78:f7:5d:89:eb:a5:33:45:
d4:1b:c0:41:59:55:b1:2a:3e:43:f1:cf:98:92:86:63:f7:20:
5e:52:27:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:31:49 2024 by rpki-client on console-fra.rpki-client.org