Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer
File: OxO_giWSvRtUt3zCwcxCsozPFmk.cer (raw, json)
Hash identifier: yaC2zTqzc+57QUK5SqrRZC6yJfD/vYua0cgkcAKzURA=
Subject key identifier: 3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EE439A39BE005106D2708AA23ADDE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 213.178.140.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e4:39:a3:9b:e0:05:10:6d:27:08:aa:23:ad:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b13bf822592bd1b54b77cc2c1cc42b28ccf1669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:e0:20:4e:15:1c:62:2f:dc:d8:ca:af:95:
ec:6a:65:b7:02:a4:44:9d:78:a8:90:f3:f2:7e:b4:
dd:03:4c:79:a8:1b:79:a8:f8:3c:78:cf:6b:5d:44:
f6:3b:db:8b:66:99:76:d4:7f:16:15:38:c9:7b:c9:
a5:44:be:c8:58:d6:74:cc:02:7e:57:74:82:d9:6b:
c0:47:62:52:5d:ca:a2:83:42:72:44:5e:18:23:b2:
31:90:57:68:22:ac:91:59:aa:4d:d7:11:53:43:9e:
94:a6:62:b0:84:3d:f1:95:3b:38:3d:82:ec:1e:d0:
9f:67:be:36:e0:9b:f8:89:4e:70:99:7a:cd:7c:b6:
44:17:d3:66:ba:ae:6d:bb:ea:66:0e:73:7c:f4:f3:
27:36:be:48:a1:64:2e:a4:1c:bc:f1:a7:85:0b:d7:
a0:5d:69:42:fa:62:d1:31:3b:b0:15:5a:9c:41:4a:
29:59:00:98:5c:ad:1a:ec:eb:42:61:4d:a1:4d:c3:
a0:65:8b:73:51:a3:ef:b2:bc:a9:9b:9f:af:aa:e7:
91:a6:bc:de:18:78:32:bf:73:28:3e:2a:b7:c8:6b:
e7:22:2e:82:66:21:aa:c9:f8:fc:b4:07:1e:d5:23:
60:f0:b9:8b:5d:12:92:38:2e:d4:df:c8:55:b4:3a:
97:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.178.140.0/22
Signature Algorithm: sha256WithRSAEncryption
41:fe:b6:9d:c4:8e:35:e8:9e:d1:49:bd:2a:3f:00:22:48:bc:
73:74:44:04:eb:9f:38:5e:2e:49:0d:d6:ff:02:21:ae:06:a4:
e0:68:6c:81:6d:a7:9b:1a:a9:8c:2b:ef:f0:9b:cc:fd:ee:62:
01:a9:22:62:08:60:96:d5:f5:e1:d5:ba:91:38:23:a9:1b:f8:
21:90:60:88:10:05:66:79:9c:ee:db:09:8a:27:b6:dd:84:00:
4e:f3:ae:70:01:95:68:f7:8a:84:59:c3:61:d4:cb:8f:f1:ee:
39:e0:66:2f:cf:44:1f:8e:33:b8:e6:4a:1f:23:1d:77:c1:e4:
ae:67:a2:26:82:ad:13:11:95:65:1c:93:d8:0e:8b:e3:cf:69:
36:2e:37:32:bb:73:99:42:a5:b7:62:26:6b:49:bd:b9:a6:5c:
d7:68:95:0e:14:06:1f:95:77:1b:9d:c0:13:7e:66:33:1e:d6:
3d:30:35:f0:f3:bd:f3:66:57:45:7c:41:62:9f:8b:c2:c0:23:
93:c3:19:cb:34:9d:0a:a8:1f:bc:c6:5a:ca:af:6c:ef:15:f7:
1a:08:57:4b:e4:de:d8:02:06:96:c9:7f:5a:2c:ee:78:8f:98:
e2:e2:f9:b4:86:39:bd:3d:91:f9:b4:91:f2:83:b4:d8:88:ca:
57:13:29:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 12:11:15 2024 by rpki-client on console-fra.rpki-client.org