Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
File: oI4K7xzR6dMqYWrfWCRaOriKVUs.cer (raw, json)
Hash identifier: +3qs/LQRGiBPFyr5GT47aNQ+kF/F2tNhbBM2mLHUdlg=
Subject key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B6DA0DC045282EE1DD0155577696F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.153.94.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:6d:a0:dc:04:52:82:ee:1d:d0:15:55:77:69:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:a3:9e:d1:d1:d3:e4:99:b8:96:28:39:20:
a0:ed:2e:35:6f:a8:2c:5e:b7:a3:6a:c4:bf:f4:c9:
d2:e8:f0:41:60:cb:a8:36:cb:a6:f9:5d:9b:5a:ce:
6f:3d:31:cc:f9:42:19:e8:c6:af:dc:db:3c:a6:3b:
d6:cc:f4:98:22:22:64:f5:e1:0b:31:21:5a:f1:1a:
63:30:08:e0:e7:3b:72:22:7c:58:d5:13:75:d5:b0:
b9:1a:c3:c2:b7:73:e5:68:3e:f3:3b:fc:ea:04:74:
12:30:29:c1:58:14:d0:53:ee:82:76:9e:a4:a9:7a:
23:d2:83:4c:b0:c0:97:0b:14:06:ee:d6:53:55:d5:
fb:a8:df:20:17:e1:51:59:3d:6d:ee:7c:bb:fc:c1:
ca:24:ea:eb:04:95:88:eb:21:15:8d:a7:8c:94:8b:
30:99:9d:11:9d:cd:09:da:57:9a:0d:4f:2c:43:85:
47:c3:bb:7d:b6:4c:ec:3f:01:4f:46:77:c4:73:60:
4f:df:92:5b:8f:82:e8:cc:e2:4b:fb:a1:5d:dd:dc:
af:48:a4:83:d2:35:b4:00:32:53:b9:83:b2:0c:5b:
9e:aa:99:e5:f4:84:77:3b:15:80:c7:19:cf:9e:cc:
57:3a:65:69:5c:eb:a2:62:81:ca:8b:df:b2:ce:bc:
1a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.94.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e7:31:b2:f3:cf:b0:e6:17:31:3a:eb:ad:cc:5f:3f:62:08:
97:15:2f:13:bc:69:96:e7:c0:e7:c3:22:e4:01:e0:ca:3e:03:
ad:c0:5b:3c:b6:09:98:f1:e5:38:c0:27:2d:86:0b:19:2e:de:
e3:41:83:9c:42:af:20:23:e1:77:93:0d:cd:fe:88:1b:c3:2e:
c2:2f:ad:b9:a1:78:92:f7:d0:c4:52:e7:e0:10:d4:72:e7:92:
d6:29:ed:9e:57:bb:bd:0c:a0:bb:3b:3d:10:cf:4c:a9:94:ef:
6f:84:b7:ba:a9:29:c9:b0:e3:84:b6:f9:fa:a6:c3:25:6e:14:
3f:51:dc:a1:90:8c:c3:a2:07:77:3c:50:12:80:b5:5f:1e:cb:
3e:d6:6d:c6:16:68:8f:24:bc:59:c6:75:44:84:e1:aa:2d:3e:
e1:24:e2:85:a5:d5:74:7b:fe:ca:60:ae:cc:1c:db:aa:c3:61:
2a:11:7a:0b:fe:a4:6f:10:9e:f8:8a:d5:95:3a:7b:96:9b:01:
b0:b0:0e:5a:bc:24:89:c5:bf:4b:6c:89:01:79:5f:df:e9:a7:
e5:e5:e0:27:d9:f2:4d:9b:6d:05:49:63:83:61:fb:46:3e:95:
ff:85:48:9c:db:e3:56:8f:c8:13:94:87:18:9b:6e:b6:c1:6e:
10:f4:27:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:42:44 2024 by rpki-client on console-fra.rpki-client.org