Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
File: cOKzQXw5wP47u7xNUj7UN7KcWhw.cer (raw, json)
Hash identifier: XrhwakD/a06noz/oKbdgapxqynjUpAX4Z1BFWZ4PiV8=
Subject key identifier: 70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2B2AC144FED8586AAA1B057089E7A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:34:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 192.68.216.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:2a:c1:44:fe:d8:58:6a:aa:1b:05:70:89:e7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:34:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:4c:88:36:ff:b6:36:91:a8:97:2c:74:92:
56:3e:6d:7b:66:fe:07:67:c1:3a:2f:78:67:12:8e:
7e:79:c3:2b:7a:6d:28:f5:8c:30:06:68:3e:2f:3b:
c9:4c:2a:56:61:fd:c8:43:23:7d:77:e5:91:67:27:
46:12:09:e5:a7:6e:26:64:6c:4b:11:9e:1d:f6:1e:
4a:0c:97:63:6b:b9:af:78:9d:3e:af:3a:b9:03:92:
be:dc:19:2a:94:05:c6:84:16:7f:55:45:23:d7:c5:
5b:c5:1e:0c:db:ca:16:27:95:b4:34:14:a9:ac:8e:
83:72:8c:1c:22:a8:c4:01:ca:89:13:65:cc:9b:e8:
e6:ce:ae:80:c5:5c:7f:b6:a1:5f:e7:2b:c8:df:c5:
7a:8a:99:25:4f:98:9b:b7:5e:6d:95:c8:7b:04:f1:
5c:47:c2:05:b5:19:7a:fc:0c:f9:c9:9c:7d:40:cf:
01:05:b4:40:d2:9c:25:cd:3b:e0:32:e2:f1:0c:db:
4e:ab:f7:44:27:79:78:4d:4a:bf:d7:a7:63:5a:4b:
e6:49:c2:38:8b:69:06:19:8c:3f:16:26:f2:64:b2:
3d:bc:bc:f7:3f:c8:0a:34:0e:86:ec:9a:43:2f:aa:
71:9d:40:f1:fd:cb:48:c0:68:41:af:8a:00:46:e5:
ed:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.68.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ca:da:b1:3c:9a:99:86:09:0b:3f:cc:21:b3:57:af:ad:40:
30:d2:43:09:99:5c:dc:f5:03:4a:d5:2a:f4:6b:94:e1:5c:1a:
ff:93:44:a5:d0:fc:e2:25:cc:5f:95:77:7d:48:53:03:f6:af:
59:31:ed:33:dc:fa:fb:06:27:45:7f:24:a3:84:ae:3f:af:77:
b9:77:dc:49:82:6f:8a:c7:e4:fb:2a:46:44:12:24:00:de:e3:
71:7d:43:60:a2:0e:3f:3f:15:36:53:f1:3d:17:f3:51:2e:dc:
6e:7a:16:e3:65:db:19:ae:f7:37:2b:d1:1b:f3:5a:1d:2b:cc:
fc:a7:5e:a2:81:ac:f6:e6:b0:a6:99:7f:48:dc:c7:a1:57:d1:
60:98:e9:d8:f6:fa:25:91:e4:3d:1c:fb:74:5b:7e:b0:55:b0:
85:53:cd:e1:78:24:b4:c2:0e:4e:50:cd:f1:1d:96:2b:84:7b:
e0:01:e6:b7:f5:43:ee:4d:d4:56:fd:b0:6a:e1:84:3f:6e:57:
82:80:ea:8e:1f:28:82:a2:30:ab:de:2c:f5:e1:4f:b2:2a:81:
58:25:1f:27:dd:63:06:a3:b6:12:4d:75:ff:02:34:be:b0:8a:
2f:0b:cd:07:89:0c:e9:83:d1:42:9a:0d:5b:6e:eb:81:70:6c:
19:e0:92:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:35:32 2024 by rpki-client on console-fra.rpki-client.org