Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
File: PcOGJxwOCo0B-xkNaNhf92TRatQ.cer (raw, json)
Hash identifier: 0rYod2xgdXNc62rXla/67lE5MFrRj1I23ZnsrM16568=
Subject key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190D91987FBBCDD47B2A6DC597D41331B48
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 22 Jul 2024 06:20:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.206.34.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d9:19:87:fb:bc:dd:47:b2:a6:dc:59:7d:41:33:1b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 22 06:20:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:83:ea:69:b6:d7:c8:b2:99:7a:5c:29:37:49:
ac:57:aa:52:07:18:3d:85:35:0a:df:a2:4d:9d:83:
45:97:25:61:ee:d3:c1:c0:95:4f:ea:23:a2:c9:98:
69:f6:83:d2:73:8c:79:70:9d:7a:24:12:31:33:bf:
84:1c:86:e1:cf:5f:0f:7f:c7:98:21:a4:b5:56:68:
84:bb:7e:9e:9a:f5:2b:d9:8d:09:c6:82:4c:ba:14:
cc:71:b0:b5:fa:8b:68:bf:ae:12:6c:47:68:81:b5:
af:9e:35:36:52:fc:32:f5:73:24:d7:f3:44:92:66:
46:04:d9:e9:56:1a:02:e7:07:0f:f5:06:51:7b:9a:
f3:d0:4b:36:ff:b2:a0:b2:16:37:27:e3:26:87:b4:
6b:ac:98:61:67:57:d8:e3:29:61:2b:6d:4d:53:32:
08:44:6b:9b:d9:e6:be:3b:b0:2a:a9:29:5f:32:39:
bd:70:ac:bc:f7:ad:e6:f1:42:2b:a4:92:34:0c:07:
9a:d8:ad:fa:ec:42:a9:56:de:85:0d:c7:1f:08:69:
60:a0:e6:a1:00:6c:0b:1e:bd:b3:2c:d7:3a:c0:f6:
00:60:0e:4d:fd:96:e9:7e:27:97:0a:d2:b9:bf:46:
6a:66:ff:38:b1:9a:18:21:84:a0:85:74:81:65:23:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.34.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:c4:ab:52:2d:c5:dc:a2:3c:d3:e3:7f:08:74:c8:cd:81:17:
a8:00:3b:aa:ed:0e:64:7e:5c:49:20:03:b6:af:45:a8:d9:cd:
98:da:ee:6f:ee:6e:bb:53:29:d1:41:23:88:71:5d:23:28:9e:
c0:e2:91:fd:06:1f:27:02:e2:1d:ee:0f:e1:8c:89:98:02:38:
2c:d2:09:67:5b:82:91:1d:13:fd:fa:f6:bf:64:89:24:b2:60:
6a:82:23:07:51:ca:5f:e7:e0:71:68:ee:57:44:88:aa:22:1f:
21:b3:44:f0:df:18:c3:49:1f:18:2a:46:74:50:e5:b2:d7:63:
df:fd:dc:00:b9:e6:81:08:b8:c4:eb:30:88:4c:8b:75:20:33:
6b:5b:fe:33:63:3a:7f:08:a0:89:71:0c:41:bc:c5:58:d2:a5:
78:09:72:c3:84:85:fa:a7:b6:90:b8:4b:a4:b0:2e:99:43:25:
30:6e:8e:2b:e9:4c:bf:51:04:34:6b:97:a5:85:2a:57:5b:47:
0b:86:2c:0c:e2:c8:dd:30:3d:79:e5:d8:b4:1a:c5:36:ad:af:
ca:a8:c0:d5:25:a6:9a:62:3a:43:b7:3e:f5:31:02:4c:1b:77:
54:e2:b5:18:f4:c8:18:e7:da:6c:7e:c6:28:3a:65:8c:8a:3a:
89:0e:f4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:08:25 2024 by rpki-client on console-fra.rpki-client.org