Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
File: Od2goAlTA6kfOOQ6tNN7YZw76h0.cer (raw, json)
Hash identifier: HdIGo1lEQ8r6aix1TWLrih9lSL9r5MH72lEPXH8QGtg=
Subject key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC44A9DD3947C2E5BBF0145FF02BE1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.105.216.0/21
IP: 185.114.24.0/22
IP: 2a06:6c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:44:a9:dd:39:47:c2:e5:bb:f0:14:5f:f0:2b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d4:da:e2:0d:69:37:a7:a3:4c:1e:60:77:80:
7e:2a:09:8e:0d:49:6b:55:38:bd:68:6d:cb:81:30:
be:d7:88:ad:c6:a6:71:d9:07:14:1f:21:53:af:51:
19:6c:a6:97:c3:50:be:0d:70:dc:f6:26:f1:3e:10:
96:9d:81:9f:7a:cd:91:b2:19:8e:48:44:21:66:fa:
87:1c:6f:b0:2b:c1:73:20:97:ab:4c:ae:c2:11:fd:
9b:24:60:f2:ee:49:1e:c8:dd:2e:a9:99:5a:61:de:
e1:6c:a3:04:43:f6:e0:6e:72:a8:f2:19:18:99:74:
fd:54:ba:bf:cd:41:d4:ef:e3:e9:f7:ec:db:25:15:
40:39:dd:d1:5d:59:ea:7e:04:3c:ab:a3:99:25:4a:
3e:35:9f:f2:df:6c:34:fb:94:27:ee:1c:fd:81:a9:
82:f8:77:aa:72:ff:3e:1a:79:e1:94:52:d8:24:49:
96:f7:ea:78:aa:9f:ed:75:a7:25:b1:d6:8e:f8:cb:
4d:fb:41:1c:76:6f:02:30:6b:36:72:bd:fe:2b:a3:
7e:c5:c0:0d:5a:8d:74:a7:6a:51:fc:e0:91:64:0d:
ea:a8:ac:36:9b:2b:36:12:dc:05:95:be:ac:81:90:
db:e3:3c:e9:b5:42:e2:4c:7c:cb:6f:7d:74:a4:ec:
de:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.105.216.0/21
185.114.24.0/22
IPv6:
2a06:6c80::/29
Signature Algorithm: sha256WithRSAEncryption
7f:64:04:fc:c6:40:67:5a:7c:46:eb:33:7a:33:e3:99:a5:60:
a9:4b:2e:b7:59:d2:5e:69:8a:e9:58:82:e3:7b:25:4e:7c:c1:
44:06:da:de:b3:ac:2a:a3:81:9a:88:f6:b4:ff:f7:10:28:a6:
22:5c:f4:d7:4c:42:ce:36:4d:98:ef:c6:39:8e:ad:f1:82:c8:
68:16:eb:16:ff:7b:cd:5f:f8:92:95:83:1e:e0:55:bf:50:fc:
b6:f5:2b:a2:5a:a4:db:c9:bf:5d:08:81:14:16:3c:5f:d9:ba:
4f:0f:b9:2f:34:4d:93:fb:ae:26:c7:f4:22:da:5c:13:fd:49:
3e:f1:69:51:d1:d1:1d:9c:4e:8a:b1:80:0a:21:a7:4b:5a:e2:
06:14:d3:7a:5a:e9:a9:c4:5c:7a:cc:a3:cf:eb:57:ef:51:5e:
bd:ec:38:6c:03:86:1d:8c:da:22:01:a3:96:95:a9:29:2f:cc:
93:81:55:71:30:c4:e4:7e:29:0d:30:10:dd:86:75:48:0d:03:
83:84:34:bf:9c:35:f0:2f:86:56:47:1b:21:41:e5:03:65:a4:
7f:62:b9:c5:46:b2:29:2a:e9:f5:2a:4a:26:89:59:37:39:1c:
6c:fb:0d:bc:c4:be:e1:e4:45:97:02:be:e4:42:09:71:07:d2:
a4:fe:7b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:56:26 2024 by rpki-client on console-fra.rpki-client.org