Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
File: oJfWos9CiA2-v0KjJRkHohyRpKU.cer (raw, json)
Hash identifier: Cprozb+TusyvMM4OfgW7PvHke8/hktEXX8q3bWEjYUE=
Subject key identifier: A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DCA6AA6DA0C936C81E20676051C1D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.8.76.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:a6:aa:6d:a0:c9:36:c8:1e:20:67:60:51:c1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3f:f0:89:f3:de:d4:10:39:bb:8c:a9:54:69:
2b:3f:f0:b4:c3:73:e9:78:2b:2b:80:68:b7:b1:cc:
36:28:75:c2:ce:b2:44:f0:30:31:31:ec:88:4f:c1:
a2:d1:91:bf:03:69:c3:6c:37:93:60:4a:76:fa:66:
89:58:7b:28:21:2d:20:3c:b9:9f:9a:64:61:11:0f:
21:20:83:02:d2:e1:4c:7a:68:de:88:95:3b:ac:6a:
69:ce:9b:41:76:2f:0b:f2:c3:5c:32:e0:01:bd:9f:
48:99:48:e4:71:53:a5:f4:de:88:4c:3c:b0:ff:74:
c2:ad:e1:63:bf:a1:7f:fd:e4:dc:8f:03:16:25:de:
e0:59:79:c4:d6:ca:05:57:6d:68:e3:5c:ee:21:d9:
7f:39:4f:ce:ab:66:8e:23:29:52:49:a4:96:55:3e:
45:f9:a1:64:b2:3b:55:fb:ca:44:7b:43:51:ae:08:
28:43:6e:fc:bf:77:60:b6:5f:98:25:c6:d5:00:c2:
66:0a:30:ae:3c:19:49:47:a6:ba:97:e3:b1:cb:28:
26:b9:ef:b9:94:51:97:3f:5c:db:fb:43:89:0f:d2:
83:a6:64:54:4f:97:11:0f:4e:18:ed:69:ec:1e:0b:
91:8f:22:a9:3b:ee:32:83:7b:07:d4:1b:df:1e:bd:
98:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.76.0/22
Signature Algorithm: sha256WithRSAEncryption
02:cc:f6:2b:b4:62:1a:dd:b3:26:f4:57:91:db:bc:e8:bc:01:
5e:df:b2:cf:93:62:6e:09:36:e6:d4:fe:3a:fe:46:d8:28:09:
8b:6c:30:c2:8d:d5:67:be:7e:7d:b5:61:b2:a4:56:da:81:29:
58:14:f5:ca:0b:3f:8d:9b:cd:26:57:5b:1d:5d:49:fb:36:53:
5b:05:03:54:0a:1c:06:47:e6:d2:2a:07:c8:c7:48:45:96:21:
c5:ea:eb:45:6c:90:b4:ae:56:bb:a3:9e:65:7d:18:9d:06:55:
68:b8:39:54:4f:3c:da:3f:54:b0:a3:e0:51:61:74:22:2d:5e:
7a:4a:fe:7a:af:81:ce:1d:e0:f5:0a:4f:fd:2e:53:0b:c2:66:
d0:f7:ea:74:69:43:ab:0f:74:52:d7:af:c6:4d:ec:4e:7c:f6:
00:fc:79:23:52:16:27:7d:01:e2:56:f8:3b:43:19:09:14:56:
4b:e3:32:06:a9:0c:fd:62:4f:e6:cf:e4:9f:35:b8:c7:fe:1d:
b4:a4:0a:5f:df:50:e5:76:8a:0a:7d:9a:9a:4e:b5:7a:04:13:
7c:c4:e4:b6:5b:4a:dd:4b:76:79:2b:c4:1b:88:da:1f:e3:5d:
9c:02:a2:0a:f9:a2:b8:19:8d:26:3b:ab:f7:97:d6:46:ed:bc:
de:0b:8b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:42:47 2024 by rpki-client on console-fra.rpki-client.org