Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oEFbY1ex6yMoIQkf1PJoeVQOaFc.cer
File: oEFbY1ex6yMoIQkf1PJoeVQOaFc.cer (raw, json)
Hash identifier: FUiPa1SAseYIZ6HsNY1I5dIMVhtXJzTY6dYMTQsWJeo=
Subject key identifier: A0:41:5B:63:57:B1:EB:23:28:21:09:1F:D4:F2:68:79:54:0E:68:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D1159934BE151FB2441CC6D4CEB7AC835
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/oEFbY1ex6yMoIQkf1PJoeVQOaFc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 16 Jan 2024 08:18:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.190.133.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:11:59:93:4b:e1:51:fb:24:41:cc:6d:4c:eb:7a:c8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 16 08:18:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0415b6357b1eb232821091fd4f26879540e6857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4f:be:88:38:96:ec:91:cb:64:c0:04:70:e8:
46:99:35:4d:a7:f1:4e:b9:e7:6b:53:95:95:7e:93:
1e:dc:6d:8b:1c:4c:be:c4:6e:b3:bc:8d:11:fc:27:
58:04:b1:88:d6:84:0a:f7:6b:9d:98:97:79:97:07:
89:7b:77:ef:18:05:1d:e3:09:3b:47:d5:7e:15:69:
13:62:f4:da:0a:fe:09:8e:d7:d8:15:4e:92:9d:96:
9d:8d:f0:6b:43:bb:87:2a:39:d3:9a:1a:0e:e3:d8:
88:b0:a0:3f:5e:dd:45:d9:bd:0d:89:fd:d6:e7:fe:
f6:6d:b7:fa:cf:f4:19:b1:1c:60:96:f4:93:8e:2c:
cd:ea:5c:b8:d6:ee:44:30:fa:37:b7:c4:61:02:53:
9c:f6:e7:51:e9:0d:dc:13:ab:93:e5:e8:97:05:4f:
4c:36:9a:ab:d3:2d:80:89:da:18:8f:8b:f2:0a:4f:
1a:b0:ba:da:05:72:84:f1:d5:28:bd:18:37:8c:1c:
a9:69:85:64:db:a9:1f:d2:86:c1:39:da:89:bf:57:
59:19:40:1a:b0:bd:f8:b2:ce:89:06:4a:8a:27:bf:
62:4c:1f:ce:38:8e:21:64:84:49:3c:a3:39:a9:8d:
05:bd:f1:4f:51:e7:ac:31:d2:61:a2:c9:26:85:2f:
98:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:41:5B:63:57:B1:EB:23:28:21:09:1F:D4:F2:68:79:54:0E:68:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/oEFbY1ex6yMoIQkf1PJoeVQOaFc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.133.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:2c:10:9b:00:2c:3c:da:92:8a:66:69:e7:1a:1d:fb:c0:67:
76:3c:30:00:9f:b8:15:0e:d7:cd:7f:7a:96:b7:9e:d7:7f:cf:
49:36:f9:a4:4c:74:0b:ba:95:39:97:52:d5:c6:0c:9f:a0:2b:
65:f1:86:3a:bc:b9:08:25:e6:b8:38:fa:ce:f6:6d:b7:45:9d:
39:27:f1:33:cb:b4:ed:d7:b5:3c:c1:ba:01:ed:13:be:70:1f:
44:d8:66:3f:f4:0c:6c:a9:75:2f:3c:bb:2f:0a:ec:dc:96:d5:
1f:95:2e:2d:a5:86:6a:47:80:26:d7:53:59:1e:18:7c:f1:b7:
4f:c7:61:1a:94:27:aa:da:e2:6b:e0:70:71:4c:8d:94:7a:9d:
d6:df:e9:c5:ee:b0:c2:10:e9:f9:8c:80:86:78:c7:79:b1:2a:
a1:4e:3e:59:0a:e3:d2:34:bb:6f:16:09:4c:2e:22:60:ea:bd:
bd:e0:aa:1d:9f:56:53:12:8a:49:d1:1c:c6:fb:28:5d:bc:8c:
ab:c3:df:89:4e:0c:19:19:43:ba:16:3b:da:82:67:cf:c8:61:
a1:94:a5:56:eb:8e:50:af:7f:92:e7:07:24:e4:a5:7a:9b:8b:
44:c7:ea:8d:2c:15:14:06:b5:7d:a0:2d:07:a4:39:f5:9b:fe:
ae:f5:64:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:13:57 2024 by rpki-client on console-ams.rpki-client.org