Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
File: Oexx3D1ozej5B3069mdRwp_O6kw.cer (raw, json)
Hash identifier: 27R0g7S4uwekyFT/HMOb28hujsM37R1F4xcPlyNNCZk=
Subject key identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B70E682F1F92CA41C2AB2E61B8E7D7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 178.213.152.0/21
IP: 2001:67c:134c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0e:68:2f:1f:92:ca:41:c2:ab:2e:61:b8:e7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:47:11:fc:16:64:15:f5:ba:a3:67:9c:7e:
a6:b2:27:d1:c2:e7:1b:32:bf:ce:4a:b9:c7:75:ec:
a4:51:da:77:9d:a4:61:63:ad:76:78:6f:2e:ec:52:
fb:db:6e:17:f2:4a:80:1d:9d:79:1a:f1:04:1f:af:
c0:2d:19:34:cf:6e:70:b2:74:a2:28:14:f0:0c:91:
5f:9d:d4:c5:79:f1:5d:55:36:30:d7:fb:e5:df:f9:
22:36:68:47:31:14:fd:03:7a:c2:9b:1c:35:02:45:
0b:7c:da:26:e4:14:5f:4e:a4:f2:c5:80:e1:72:19:
fd:a1:c9:49:4f:4b:ac:7a:04:06:7d:66:44:40:aa:
82:3a:a4:f4:42:75:4d:62:39:22:e0:e8:f0:e3:d0:
c4:e4:92:01:5f:e3:0e:75:a7:f3:53:ec:3d:6d:c7:
47:3a:2c:d5:5a:2c:a7:40:ca:0e:98:a0:c0:21:3d:
c0:8d:29:52:ed:8d:1c:c5:88:12:4d:e8:0f:58:7b:
68:59:fe:51:fb:2f:97:6f:64:c7:16:e8:15:d5:52:
c5:dc:a7:91:46:1c:dd:17:62:68:08:eb:e3:d5:8e:
97:1f:55:6f:16:4e:ec:0f:a0:ae:04:3a:76:29:74:
6b:c2:03:1c:22:18:15:e8:f5:a9:27:4c:21:d1:39:
d8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.152.0/21
IPv6:
2001:67c:134c::/48
Signature Algorithm: sha256WithRSAEncryption
16:8d:24:fe:1f:73:85:9d:79:a1:55:95:d0:71:82:91:ec:4a:
e8:2d:e3:62:c8:02:ab:62:e8:b7:16:54:62:08:39:50:b8:b5:
ad:b8:b6:c1:55:b2:fe:00:8a:d9:97:da:75:f6:97:bc:6c:a2:
54:36:31:4d:74:26:22:a3:13:8e:e0:b1:79:71:23:2b:8d:6d:
b0:51:dc:ac:98:53:d8:db:f8:25:30:5b:f8:2f:7d:6e:d2:f9:
26:83:34:ec:0c:e5:08:32:c6:3a:aa:6f:1a:77:19:08:2f:6a:
f6:11:00:af:3f:e3:ff:54:21:20:13:e3:e0:97:0f:9a:06:05:
b4:18:1a:33:ee:34:81:94:57:d3:3e:8f:65:db:3e:4f:67:0e:
c8:5d:02:c1:36:97:c3:3e:86:f6:ae:ca:b5:db:56:05:e4:35:
7a:fb:43:99:e4:ad:76:cf:cb:d7:c5:21:d3:27:63:6e:5e:22:
3b:c4:5b:4d:b8:21:64:6a:41:14:4e:c8:a3:1b:1e:cb:01:ca:
0f:12:5e:e2:4c:be:ff:a2:cc:72:11:63:df:c3:89:76:48:9b:
fb:7c:c8:7a:74:87:54:78:53:0d:8f:98:9e:17:87:db:94:fa:
00:46:d9:8d:44:23:b3:03:ef:f5:c9:c8:fd:1a:2c:59:50:b3:
b6:cb:05:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:58:28 2024 by rpki-client on console-ams.rpki-client.org