Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
File: o2n7GRvuUc3HQUppYxl_hrvzE6s.cer (raw, json)
Hash identifier: sBq8IUaC9i3r+A7PaqBzlrQCl8X993CBRjbIG1ezIcU=
Subject key identifier: A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4244CC3F33B7CD808FC9C255593FA97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.164.228.0/22
IP: 2a0b:4400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:4c:c3:f3:3b:7c:d8:08:fc:9c:25:55:93:fa:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5e:7d:41:a0:79:c4:06:7e:07:d7:54:0a:ee:
06:21:4f:48:92:de:e0:d0:66:b5:e4:e8:2f:94:7a:
ce:01:79:ce:37:66:2b:9a:a8:90:f3:2b:f3:d0:70:
87:f5:1d:29:3a:2c:f2:25:e1:d9:85:35:8f:5b:a9:
d5:2a:80:78:d9:21:cb:70:4f:cd:93:42:1b:45:ae:
e0:82:2b:e1:d8:a6:43:1a:e5:f5:e6:11:b2:61:d1:
36:5d:b8:57:40:9f:d3:5f:2d:74:ef:c5:87:e9:74:
5e:19:f0:eb:0d:70:82:3e:4f:57:f2:1c:ea:53:b0:
72:3e:0d:cb:70:c4:8c:a9:d4:6a:a2:d0:8e:e7:4e:
36:52:1a:2b:f6:4c:7d:be:a0:05:ce:30:1c:c8:20:
6c:80:77:d3:10:32:c6:50:c6:c7:d3:37:2a:3b:12:
ae:b4:89:68:8d:83:cf:4c:5b:1a:8b:7d:f8:c8:64:
b7:02:a8:27:a5:ef:40:cf:dd:18:3b:e3:52:2f:ab:
f9:dd:bb:0b:6a:35:ef:7e:9a:1e:71:fe:59:0b:2e:
eb:86:d5:eb:b9:2c:bd:4a:97:54:67:03:0f:4b:ac:
66:a9:ed:8b:4c:50:38:09:84:0b:57:0b:5d:a9:6e:
d5:79:86:b5:9c:e0:4f:99:d6:60:03:a9:2a:83:85:
80:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.228.0/22
IPv6:
2a0b:4400::/29
Signature Algorithm: sha256WithRSAEncryption
af:94:4e:37:84:f9:de:98:19:77:d5:36:21:11:97:6a:83:68:
f4:92:d6:dc:14:f7:67:b0:d6:44:dd:3b:54:8f:77:8c:bb:3d:
55:ee:22:bd:92:60:c5:70:c4:cd:ec:a8:91:ce:64:ee:98:15:
79:bb:73:3d:df:37:64:65:e5:f8:1e:91:85:36:da:c1:76:33:
42:1e:0d:cb:34:8d:91:ec:d0:24:7d:48:40:d0:98:90:63:a5:
f4:d9:18:98:14:46:e5:bc:bf:c6:2f:4b:31:c8:f1:04:bd:97:
28:91:17:74:a5:b4:e3:e2:32:19:16:ae:44:bb:c3:d0:04:0f:
02:09:b0:02:e5:88:da:b9:03:b8:72:db:16:44:c5:16:5f:8a:
b2:65:71:d6:13:5c:bf:d4:7e:22:61:d6:dc:82:83:b6:f9:bf:
bf:0d:1e:a3:d6:4d:e2:0a:50:31:54:e0:01:d3:54:46:05:41:
93:04:a8:64:94:f0:8e:cd:8f:5f:b4:47:1b:c8:85:85:f0:fd:
0e:c9:e8:e2:5c:87:0f:6c:46:a7:9b:be:40:9f:6c:d3:ce:5d:
16:4b:b7:34:8a:53:f2:22:ea:f3:03:f6:e2:91:1e:e3:5e:45:
15:8f:c9:ea:a0:6a:16:d5:0e:8d:7f:11:63:a1:c6:6e:24:be:
4a:e7:ad:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:42:30 2024 by rpki-client on console-fra.rpki-client.org