Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oCNHvJ2XM1XkgB8onKB1-dHhjUg.cer
File: oCNHvJ2XM1XkgB8onKB1-dHhjUg.cer (raw, json)
Hash identifier: HJP0XmWomY+Zcb+GXucYn/w9fsDfrnDPceav431r01g=
Subject key identifier: A0:23:47:BC:9D:97:33:55:E4:80:1F:28:9C:A0:75:F9:D1:E1:8D:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF98EADAFB4FCE83559B503C75ABA7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/142c4d-d073-48b2-bca0-322b5172af61/1/oCNHvJ2XM1XkgB8onKB1-dHhjUg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/142c4d-d073-48b2-bca0-322b5172af61/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.109.50.0/24
IP: 2a0e:4b80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:98:ea:da:fb:4f:ce:83:55:9b:50:3c:75:ab:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a02347bc9d973355e4801f289ca075f9d1e18d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:45:a4:4b:c3:aa:20:a1:56:be:f8:c3:38:63:
03:f5:69:2a:e6:2c:49:42:e4:a6:bc:5d:f8:f6:e6:
3a:17:25:90:03:a2:fd:d9:e4:b4:ab:d8:d8:46:d0:
81:06:c9:bb:bf:c1:29:a6:28:60:f9:77:99:87:86:
41:05:23:21:fd:d5:ce:89:a3:a3:77:19:96:ca:2a:
1f:b8:e2:ea:c5:e9:0d:22:51:7d:8b:64:29:4d:99:
9d:09:43:58:ef:42:09:1f:c8:c1:d9:f2:f0:95:5c:
1c:4a:b1:ce:1a:9f:78:ad:e7:9a:54:33:2a:fc:e8:
ec:12:9b:a9:65:42:35:da:4f:25:0c:e9:29:dc:ba:
3e:b3:b2:a7:df:2c:b0:59:76:25:dd:a7:cf:71:19:
ce:37:9d:cc:a6:07:75:2c:e7:cf:de:d2:64:1c:cd:
5d:30:b4:56:da:95:41:ef:6b:30:b4:e2:63:ae:e8:
c3:4b:3b:6b:a6:65:2b:a2:84:4f:17:29:37:24:1e:
1a:c6:48:47:0b:f9:ce:2b:da:b5:28:07:22:c2:56:
20:c6:4f:8e:a4:a8:33:6f:cd:14:04:23:e0:84:5c:
f0:25:5e:56:99:31:b6:fb:5d:74:fc:7e:56:8a:67:
2c:cc:06:48:5b:ad:7b:23:63:eb:df:6f:e8:05:d0:
75:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:23:47:BC:9D:97:33:55:E4:80:1F:28:9C:A0:75:F9:D1:E1:8D:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/142c4d-d073-48b2-bca0-322b5172af61/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/142c4d-d073-48b2-bca0-322b5172af61/1/oCNHvJ2XM1XkgB8onKB1-dHhjUg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.50.0/24
IPv6:
2a0e:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
5b:88:40:ed:f7:3e:5a:78:05:d6:ca:46:fe:f0:c5:46:ea:11:
f1:05:26:78:90:71:ea:4f:96:6b:9a:0c:e1:1e:a7:80:09:91:
40:f0:90:31:95:0b:3b:71:e4:99:0a:7b:99:5f:fa:5a:fb:ca:
92:6b:22:8f:28:e5:f8:0f:74:85:01:26:20:92:b2:c8:dc:8f:
53:8d:90:bb:51:36:95:16:6d:4e:08:ea:db:56:ac:91:b0:56:
8e:ee:2c:66:ce:3e:ec:4d:9f:4e:c3:20:f2:19:9c:b7:a6:ca:
c0:ff:3b:c2:ba:97:11:d6:fb:a0:24:b9:65:23:b6:6d:4f:72:
1a:11:66:29:51:0f:0d:fc:c8:98:a6:d4:6f:5a:05:dc:58:8d:
39:37:4e:92:41:8f:26:07:c9:b9:4e:25:69:5b:bb:ac:89:bd:
73:11:55:da:e6:c0:b3:48:6d:7a:ad:c9:f7:06:22:09:63:1f:
c4:f8:6e:96:de:f4:1d:0b:32:63:1f:46:20:bb:f4:c3:e9:9e:
7e:b6:e6:9b:9e:ad:a1:00:aa:84:06:68:89:08:52:b7:ca:a2:
42:e5:6a:01:f0:20:2a:c3:95:ce:66:6b:19:3b:57:19:ae:22:
74:5d:d9:73:2a:43:e8:97:23:29:c9:6e:63:67:13:61:be:a4:
34:b8:fc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:00:34 2024 by rpki-client on console-fra.rpki-client.org