Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
File: o875PLessPtJuiiKeg-_JtMAT6U.cer (raw, json)
Hash identifier: dc8Zw1glCytMUvV8J5smMZwjEteEKIM9GSXrdZvnUPo=
Subject key identifier: A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B0D2A72757D332E1360CF371205E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.36.164.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:0d:2a:72:75:7d:33:2e:13:60:cf:37:12:05:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b2:2a:88:97:8f:ff:78:04:74:ea:e7:ed:b2:
6a:f1:1a:01:5c:72:01:b3:d8:83:34:c0:bd:dc:cc:
55:36:7c:5f:91:31:98:fb:70:d9:83:11:3b:86:d1:
2e:ca:2d:f8:81:79:cc:44:58:bf:17:ae:3c:d5:62:
5d:b4:08:31:06:5d:50:1e:94:26:ae:99:22:a3:b6:
a1:29:97:f4:bb:5a:d4:bd:38:cf:80:a4:56:88:00:
a9:19:a6:7e:63:62:8e:5f:4f:fa:3f:4a:9a:6e:9e:
96:fd:1c:24:01:cf:19:6b:fc:c5:47:43:55:f2:b0:
21:93:7f:12:82:f6:4d:80:e6:a4:5a:5b:90:f4:2a:
66:69:6d:3f:b5:b7:fe:bb:09:10:a9:83:fa:55:c7:
2d:ea:7a:d0:4e:f9:ee:3a:de:4e:0a:5a:15:08:23:
f1:5a:8c:1e:6d:92:22:b3:3c:d2:77:d2:59:6e:9a:
65:74:c5:c5:d4:36:fb:f5:fa:59:b1:b2:9a:e5:d3:
c4:f5:b8:8b:e2:04:19:dd:e0:64:ff:59:3b:89:a7:
ca:ac:64:3c:d8:c6:52:92:14:5d:f5:dd:e2:61:70:
45:4c:b9:08:8c:e3:d5:8e:ce:a5:67:7a:69:f9:52:
36:85:8b:90:52:dd:81:ec:1d:f2:32:95:0c:c0:4e:
ef:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.164.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a2:d8:b0:db:84:a7:b1:3d:9a:41:3f:30:60:86:3e:d3:29:
28:88:a5:88:eb:bc:7b:26:fe:6d:ef:85:0a:8a:ee:05:22:b0:
b1:8c:b6:73:74:2b:d1:12:25:4e:24:8b:c6:63:9e:13:2c:9f:
24:94:e6:4b:7e:68:37:86:7b:3a:5b:88:22:34:b2:60:a9:2e:
d9:f0:dc:64:55:17:05:80:9e:4f:26:9a:79:53:e4:1a:e0:c0:
5b:6d:c0:e8:0b:ca:42:8a:38:41:1a:c8:4c:af:f5:0a:a3:25:
03:9c:a9:0d:fe:32:92:72:a7:5d:d4:21:b6:dc:dd:34:59:75:
6f:21:bd:97:15:52:f5:ad:48:14:ab:68:cb:0a:4d:ed:55:13:
38:7f:cb:4d:6e:17:e4:b8:cc:34:72:45:c3:c8:ae:52:7f:93:
4a:b7:3d:09:df:37:8b:99:f5:08:73:18:84:71:af:16:8d:b6:
53:1f:be:87:57:37:ef:c1:72:41:02:48:ab:c4:58:67:b7:d0:
01:0d:ba:61:98:93:92:f9:36:29:a6:99:15:c0:80:2a:1b:5e:
7a:2a:95:f0:59:e7:80:c7:c3:39:38:2d:55:b8:e0:34:1b:c1:
11:55:49:f6:d5:09:7d:b6:19:65:6f:eb:c6:d6:df:16:66:b7:
75:1f:2c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:42:35 2024 by rpki-client on console-fra.rpki-client.org