Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
File: o6VWBFl7BrDqzoivsakP_5N9l-o.cer (raw, json)
Hash identifier: Oz+FiBmI2NHawrUuXHp5nR71XlyMVWGgBq5GXT40jsU=
Subject key identifier: A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAC8180DD65BE10B80131E14D92A65
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.132.88.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c8:18:0d:d6:5b:e1:0b:80:13:1e:14:d9:2a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:42:2c:1e:92:d4:64:bc:5e:e3:23:c6:0a:af:
ab:0e:d1:b5:c2:1f:8c:5f:81:fd:f6:69:68:ef:79:
ce:05:7b:56:74:1c:41:54:85:6e:e1:0e:5f:09:4a:
b3:90:6c:a7:ed:b8:6b:c1:69:89:2a:22:82:03:a3:
b1:ca:39:da:3c:8e:46:ce:2b:63:27:21:50:5b:c9:
4b:32:47:47:d0:ad:ec:6f:98:e7:05:82:e7:27:02:
54:8e:81:0f:48:21:0b:f4:c2:29:6d:67:58:13:5a:
a3:e7:07:d1:1f:ad:87:ef:a6:65:c8:b7:c0:ba:72:
97:03:2a:cb:5a:44:33:ae:de:40:3e:d8:94:65:ee:
3e:13:2b:ce:ae:b5:5c:12:8c:0d:95:08:63:3f:2b:
17:c4:8c:de:e8:84:fa:61:9c:2f:d7:15:3d:7e:58:
c9:c8:34:83:f0:e3:7b:6d:4f:8b:17:24:fe:d0:fb:
62:f3:93:32:7c:48:ef:3a:76:5a:e2:2f:44:9a:b8:
25:ba:00:b5:0b:55:f5:a7:14:0c:02:e8:b9:4a:05:
ed:05:84:ce:de:4a:45:53:09:80:42:f5:6f:fe:33:
c1:a7:33:d7:7d:d2:86:71:e4:75:ba:9e:62:ca:d0:
42:30:5e:66:2e:40:ba:c7:0f:74:ef:50:ba:8c:28:
07:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.88.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:9e:d2:01:99:8f:08:34:58:c9:e2:2e:bd:7a:0e:55:f7:61:
70:49:bb:23:19:15:d3:19:3b:06:9e:ad:ef:2f:00:8c:66:69:
c2:82:a7:6a:c3:f5:f9:1e:3c:5b:e4:26:ce:21:b9:c5:bf:36:
a8:14:d8:c6:75:17:7c:82:1b:89:aa:eb:3e:73:84:2f:3d:e6:
32:4f:f6:4a:d5:65:a7:a3:3b:3d:e8:54:00:98:3e:cf:01:ab:
98:97:5c:c1:d5:a7:b1:b9:18:72:91:71:1d:af:30:11:42:ce:
b4:d7:5e:06:cc:e1:3f:84:6c:a6:fa:6e:39:a0:92:9a:56:e5:
c5:b5:88:25:b8:7a:7f:6c:93:e2:90:0c:fd:03:73:6f:d8:81:
89:6e:d0:d9:99:f2:64:64:b5:42:06:17:e6:fc:78:9f:53:1c:
e9:a8:95:be:1f:4f:07:2b:94:fa:a3:85:3e:4d:2a:34:f1:2c:
84:96:84:0d:ac:c7:ea:b8:72:b4:21:da:84:d0:32:6c:3d:73:
d9:fc:eb:06:6c:d4:d2:8c:72:f3:18:b6:40:f0:e0:d5:ef:b1:
8e:11:d6:5c:5f:3c:89:39:7d:53:00:4b:dc:45:0c:c2:a3:7f:
13:e6:d9:a3:99:da:f4:3c:dc:f2:6c:29:24:33:ec:dd:62:4f:
c5:e9:e0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:13:57 2024 by rpki-client on console-ams.rpki-client.org