Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/anosbb5RGgdHJDepoPtPzNEr6J8.cer
File: anosbb5RGgdHJDepoPtPzNEr6J8.cer (raw, json)
Hash identifier: mQV/ppyUf4jy++mZCluVpMKr1YgNX1on1D+/l+OZRFo=
Subject key identifier: 6A:7A:2C:6D:BE:51:1A:07:47:24:37:A9:A0:FB:4F:CC:D1:2B:E8:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC1AA770E7BD0B8C5BBC42A7E20D94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.218.36.0/22
IP: 2a0b:d240::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:1a:a7:70:e7:bd:0b:8c:5b:bc:42:a7:e2:0d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a7a2c6dbe511a07472437a9a0fb4fccd12be89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:36:24:6d:d0:11:4a:81:f2:f6:ff:70:3a:52:
4e:71:0d:24:c2:b5:10:58:a4:80:04:e2:f1:7f:76:
b7:db:11:64:35:93:10:79:35:5c:79:bb:a6:ad:81:
39:09:e0:9b:47:82:74:21:d1:08:c5:94:8b:d2:8e:
ac:24:37:b1:6b:cb:e0:06:ab:58:b4:86:3b:97:7a:
00:22:25:53:b1:7b:a0:07:c7:ab:ab:23:cb:2c:e6:
9a:46:d4:25:0f:f8:af:b8:55:eb:87:9a:6e:90:c9:
a5:bd:13:40:3a:63:26:12:2e:12:05:b7:a5:41:e3:
ac:35:7a:44:99:94:2d:5d:da:f3:99:d7:05:ca:74:
f4:8f:f3:a6:20:72:bd:da:d8:e6:c3:9b:a0:a2:81:
ef:45:0b:65:5e:99:4c:78:8b:c2:a0:e9:18:2d:2e:
eb:81:20:35:82:da:b9:25:ab:9a:ae:64:20:93:5f:
70:aa:d0:d2:30:bc:a7:46:10:87:28:ca:51:9b:99:
b9:f4:13:df:2e:d2:33:46:c5:56:39:ef:6c:9b:4c:
e9:f6:8b:ab:cd:41:31:3a:fe:9e:57:a7:25:7f:69:
b4:f7:d2:e1:09:ff:c5:91:3d:23:8c:91:b8:40:f2:
c3:f3:b4:6d:3f:52:a5:0e:68:08:fb:9b:c4:9d:a3:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7A:2C:6D:BE:51:1A:07:47:24:37:A9:A0:FB:4F:CC:D1:2B:E8:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.36.0/22
IPv6:
2a0b:d240::/32
Signature Algorithm: sha256WithRSAEncryption
a0:b2:1b:8e:be:ee:62:61:99:f5:e5:95:45:e4:fd:db:8b:e2:
cf:c5:ef:65:56:be:4d:ef:99:fa:c7:91:d9:2b:7a:59:2b:b9:
e8:1f:9a:fb:d7:f4:10:ad:93:13:80:2b:00:05:b1:05:26:97:
ee:77:a2:f4:65:77:9a:f7:fd:68:69:a3:50:b0:e6:a1:71:86:
ff:fe:5b:61:35:1b:3f:8a:0d:ad:6c:6e:10:5f:ae:a2:2b:bf:
c6:14:2b:3a:64:b9:30:6e:75:da:57:cd:8f:28:eb:47:49:4b:
f5:35:d5:33:f7:40:fc:66:dd:4a:7c:bc:f7:9f:62:9c:a0:a1:
1e:fe:b8:2f:8c:b8:d4:cd:a1:d4:ef:65:65:af:55:ef:bd:56:
6a:8f:e4:c8:35:95:65:62:e7:74:e4:4c:e5:3e:d0:30:47:ba:
bf:81:c7:50:61:53:93:82:38:33:77:77:a2:b6:08:ab:b0:1b:
6d:7f:38:91:77:3b:f1:0a:4f:c1:94:f7:4a:43:85:c0:8d:f3:
c2:15:88:a8:80:98:8c:d1:ab:8c:ac:5f:bd:28:3d:56:1d:9f:
f8:f3:eb:f5:64:11:2f:3a:5a:40:ff:73:17:de:c3:03:d9:0b:
1a:a9:cd:83:c0:77:d8:4d:1f:36:9a:92:79:d0:e5:16:4b:ae:
ad:01:35:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:28:01 2024 by rpki-client on console-fra.rpki-client.org