Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
File: oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer (raw, json)
Hash identifier: YaATvUmdnR0PLrWY7HkwQ9P2kCjxyRSNMLtBi9g0V0k=
Subject key identifier: A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8CCDD20C7079198F538B5A50D091B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 93.157.120.0/21
IP: 109.197.8.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:cc:dd:20:c7:07:91:98:f5:38:b5:a5:0d:09:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1655282be419d21222b506fb7a368c3fe5db23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:39:1f:45:aa:35:80:5b:ef:81:30:fe:ec:aa:
1c:6f:6c:e5:e0:99:0e:0e:1c:f6:69:36:7d:6b:6b:
47:74:86:6f:2b:a6:f7:42:8e:1b:fb:7f:e9:d6:64:
fa:a6:db:a6:90:08:71:54:bc:f5:74:b8:01:54:5e:
d0:a6:bd:4c:3f:09:96:d4:a2:0e:0b:27:bf:ea:16:
43:63:70:d3:97:f6:1f:9f:62:fc:7b:f1:af:e3:c6:
5a:cb:8a:d8:ed:32:63:19:dd:ac:72:4a:ad:29:ed:
46:b4:4e:7e:01:05:df:60:ee:40:98:f0:01:a3:41:
0e:f5:c8:6b:81:2f:73:fd:32:61:85:8a:ab:ca:1a:
92:1b:8a:74:30:94:78:54:eb:b7:fd:8d:8c:17:66:
f7:4f:c7:cd:11:3b:28:e1:f9:79:07:b4:b2:f7:e9:
7f:68:8a:3b:36:31:64:15:95:cd:f2:1f:ee:64:12:
26:5e:11:f2:94:40:a4:5a:ea:ab:c5:47:18:d6:b2:
af:fb:7b:8a:c9:91:ff:1b:a7:e9:2b:88:60:6f:23:
d1:74:87:71:20:4f:be:4d:34:b9:b6:eb:0b:e8:fa:
1c:b4:ec:c2:f2:65:52:2e:fb:d5:fb:2d:d2:c3:be:
27:0c:08:57:a4:86:19:ee:63:e3:8b:1c:e4:cd:7c:
d5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.120.0/21
109.197.8.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:8d:4e:e1:2b:53:a1:72:a1:ec:30:c1:b2:c9:ce:7e:95:e9:
bb:30:fe:b4:74:5d:0b:61:41:a0:83:f0:fd:7d:df:53:fa:12:
15:0c:f1:63:b3:bc:3c:d0:be:d6:d4:a5:67:be:7a:3b:4f:1e:
34:1d:6c:1f:6a:b7:ee:66:25:ea:b8:4d:08:bf:92:8e:63:2a:
7d:a9:c3:4b:6c:26:e7:3a:d9:34:0f:5d:c6:39:ee:93:65:4a:
39:97:26:79:b8:16:e1:2f:33:43:8f:87:5c:f4:3c:6a:26:e3:
ca:ae:ee:7e:e0:b2:68:0b:de:e6:c6:f6:b1:f6:c8:52:6b:f0:
d1:3a:93:06:00:d4:25:6c:df:03:3e:58:de:25:f9:20:e8:31:
64:8c:d8:d4:ed:13:dd:83:ec:85:75:f1:64:4c:96:78:97:b3:
f9:c1:38:63:7f:49:b4:9f:5d:4c:4f:2b:2f:7f:14:ed:25:82:
4a:6f:c3:ee:c4:77:b6:eb:83:1d:44:99:75:bd:92:dd:3f:30:
7c:02:cf:60:e8:51:47:cf:e2:13:12:7c:e9:07:ea:36:57:74:
57:08:fc:10:c5:84:ab:07:b2:08:f0:a0:ff:f6:c7:a3:c7:94:
90:9a:3a:f0:09:fc:9f:75:df:d1:f9:74:db:93:29:02:fe:b1:
a4:5c:d5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:17:56 2024 by rpki-client on console-fra.rpki-client.org