Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
File: OLWdrt1DzJV1rDWVPj85biG7bYA.cer (raw, json)
Hash identifier: z1bi5en+Oe1zJSkkPUu7DYZBK45FY20yePnNF8cG8ss=
Subject key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC330CFFFC31EB2BB67B436F4AAA5C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.147.40.0/22
IP: 2a0f:c800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:33:0c:ff:fc:31:eb:2b:b6:7b:43:6f:4a:aa:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:92:fb:71:0d:52:0d:58:ed:a4:e6:ea:11:
01:b1:2a:ff:c1:a8:21:09:c2:85:ab:64:4b:6d:6e:
9f:81:aa:a2:56:c2:62:c6:04:ba:2a:29:15:4f:02:
72:f0:df:84:86:43:0f:1e:ae:47:11:47:b6:92:51:
33:04:13:ce:10:95:5a:b1:ee:da:ce:95:eb:45:90:
83:5b:72:f1:7d:35:f8:7f:09:c7:61:9d:13:22:1d:
cb:ec:cc:65:57:02:af:a6:c6:b8:bb:54:dc:da:a0:
2b:40:16:f6:9a:52:e0:ed:3a:f8:41:14:49:02:d7:
b1:fc:8f:7b:26:3e:d2:01:75:76:ba:44:98:41:c0:
bf:4c:e9:1c:e1:93:af:d6:d6:fc:e3:0b:3c:1b:66:
d4:39:8c:2e:5b:dc:c2:ea:9f:40:67:6c:ba:9d:b7:
b8:35:26:ce:ea:ce:97:4b:b0:72:09:79:8b:b2:32:
79:fe:de:a2:5f:8f:d7:36:f8:4a:66:cb:ba:8d:eb:
61:6b:e1:90:a7:b4:64:4d:22:52:1f:7a:8a:21:a8:
78:a6:f6:66:58:b3:40:a2:2c:dc:4b:a3:e3:9a:40:
17:60:5c:9d:2a:1a:c7:0a:2b:0a:f6:5a:2b:b9:df:
e6:c8:4c:95:85:7b:80:0c:f8:15:77:f2:73:b1:e7:
22:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.40.0/22
IPv6:
2a0f:c800::/29
Signature Algorithm: sha256WithRSAEncryption
99:e9:d8:10:2c:d6:a8:53:01:3e:5a:0f:b9:a4:10:40:2c:b0:
e9:9b:a5:e7:fc:30:4e:f8:43:87:c7:0a:4c:a0:9e:93:92:71:
f6:6e:30:81:79:97:6a:25:49:46:a9:b1:16:b8:18:62:91:8b:
63:d9:26:cf:7a:b2:dc:60:03:d0:93:12:fc:a3:6e:49:fd:91:
b8:03:30:35:85:06:9d:45:80:49:b1:d4:20:8b:b7:1b:93:4b:
06:a8:a3:8f:1d:06:4d:c3:60:c4:6a:c0:cf:1a:08:cd:29:0b:
5d:5f:43:e3:0d:c9:7a:e9:8b:56:d9:80:fb:16:7d:78:63:a7:
ae:12:06:0e:cb:e5:17:58:aa:e0:1f:d2:6c:85:1b:3f:51:8c:
0f:ca:2c:01:d7:f5:03:22:fa:3a:c6:78:cb:5d:78:e2:2a:f9:
92:13:45:b3:07:cf:76:cf:f9:54:96:23:b4:25:98:8c:25:8c:
19:c8:1f:19:19:de:5e:5e:5b:54:73:5f:35:e6:c7:a1:00:23:
e9:e4:77:dc:32:81:e3:cf:d2:43:c5:4d:08:58:a9:25:59:d1:
1b:5d:71:e4:24:88:fc:98:76:bb:c3:8d:5e:cf:7d:42:0a:fc:
cf:97:0b:ce:a4:81:8d:a3:62:26:1b:68:23:9b:4a:09:a7:7d:
37:24:55:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:12:08 2024 by rpki-client on console-fra.rpki-client.org