Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
File: dOEz6h5A_BPgdOMncQpTRKlgtcA.cer (raw, json)
Hash identifier: 6uFlf15Ppws8fnzGI06buUtK2KrykM9oi+VGi9gxdlI=
Subject key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC492CCDA82C6EED5458FC5372F255A71
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 31.169.68.0/24
IP: 194.1.208.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:cc:da:82:c6:ee:d5:45:8f:c5:37:2f:25:5a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:05:12:b2:bb:f8:77:01:ce:b0:ce:aa:05:4a:
38:50:98:41:82:f2:c5:bc:01:57:82:81:cf:d4:0f:
c4:7f:b5:8f:6d:b7:2d:31:e6:ff:3b:b3:41:02:bc:
71:5e:a1:ae:07:98:25:f4:b1:f7:25:d8:74:d9:39:
5f:d9:a2:1b:eb:f2:dd:22:8b:77:b2:e0:e2:f9:50:
c3:8b:0d:b1:75:0f:8e:33:3e:98:fd:21:67:8c:2f:
05:5d:18:6e:8f:a6:ed:93:ed:49:82:61:be:fb:f9:
34:06:51:7e:e6:e6:9b:11:06:59:01:fb:ff:34:08:
79:4d:72:e1:45:c6:2e:ad:23:bd:45:55:89:48:40:
fa:be:f4:57:63:e1:31:3b:ac:4e:25:83:1b:7f:25:
f2:7e:6a:4e:56:32:4f:9e:81:90:f6:c1:63:d4:0c:
6d:19:10:b4:75:ec:d4:e4:3f:b0:8a:34:b9:87:31:
e8:6d:65:50:b1:eb:73:7c:7b:39:5d:c6:3a:0b:fc:
64:ba:b0:0b:ab:30:9b:92:07:b5:0c:06:58:cc:51:
38:8f:a5:67:71:d3:85:ed:42:0f:63:7b:48:79:10:
05:1a:70:a2:79:8e:1f:ce:ed:28:1d:b3:72:cc:56:
f6:a0:5c:58:11:ba:23:00:9f:61:5a:6c:9e:ef:dd:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.68.0/24
194.1.208.0/24
Signature Algorithm: sha256WithRSAEncryption
74:8b:5d:f6:2d:7a:b4:5c:ab:b7:d9:98:58:6e:83:05:43:e1:
e9:e1:80:3f:be:49:0c:5a:39:b1:bf:05:38:9c:9f:c9:d8:90:
77:cf:5f:b3:b0:01:54:72:60:35:34:c5:bd:1d:14:c7:68:6a:
05:54:8f:fd:51:64:c3:2b:c0:46:a3:33:a3:ef:4e:d0:d9:58:
c6:53:b3:28:80:bb:e5:71:3e:47:32:e7:a5:24:41:7c:7c:2f:
a6:57:d3:4c:2f:af:2d:e5:77:84:ed:cd:5e:63:1a:1c:28:f6:
3e:27:50:25:d4:ca:42:36:43:30:bb:16:8e:a8:87:e1:60:9e:
44:9c:a8:fb:f8:cc:50:9a:f9:e4:77:87:30:53:e5:83:2e:f7:
fc:a4:d4:72:b6:c4:ee:dc:9e:75:b3:dd:a5:18:05:df:ce:03:
c9:82:89:49:68:a1:c6:69:6a:ab:2f:a0:61:4a:e4:e9:91:b0:
6b:2e:c3:74:33:ab:e6:1e:19:e3:e0:85:37:f9:a9:ce:0b:53:
b2:c2:ef:8b:42:8b:76:17:c6:3c:0b:38:41:5a:e8:a4:79:0c:
3a:1c:37:0a:24:9d:ef:5f:85:c1:45:04:30:e4:af:28:14:31:
ca:1d:6d:9b:57:47:e6:ea:8d:1e:44:ac:c2:04:06:60:93:af:
c3:46:93:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:49:38 2024 by rpki-client on console-ams.rpki-client.org