Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oo62nPsiMlz3UP9WMVDb0ESRvrs.cer
File: oo62nPsiMlz3UP9WMVDb0ESRvrs.cer (raw, json)
Hash identifier: m2OjkQWk5l12TxRjRqCG1tEZimJ15xf2Re7MfbM71h8=
Subject key identifier: A2:8E:B6:9C:FB:22:32:5C:F7:50:FF:56:31:50:DB:D0:44:91:BE:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D3314085B1F2E9F97AD925BDD447A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/oo62nPsiMlz3UP9WMVDb0ESRvrs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.213.202.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:33:14:08:5b:1f:2e:9f:97:ad:92:5b:dd:44:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a28eb69cfb22325cf750ff563150dbd04491bebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5a:63:a5:84:47:de:72:0c:00:df:35:f2:bc:
3c:aa:0a:6e:77:5f:a6:b8:50:d5:1f:c2:a0:85:48:
41:89:d0:c1:ee:50:2c:79:f9:40:ed:22:e2:39:00:
8c:9a:81:c1:54:29:f6:bf:c1:ff:2c:b8:e3:62:c1:
11:50:87:44:14:1d:10:12:59:7d:36:fb:c9:90:1e:
34:ae:84:c7:4a:9c:95:1d:a9:55:cd:cc:1e:d0:07:
a4:66:9f:af:df:fe:12:0e:09:9b:f0:ff:09:0c:8a:
bf:5a:d4:57:fe:e4:6c:3a:00:d3:63:b7:3d:03:c2:
aa:15:bc:8b:c9:ac:fa:b5:47:28:bb:bc:8a:6a:e9:
db:c5:a7:05:05:cc:cb:a9:cc:5f:77:78:50:06:e7:
39:92:36:9c:e4:09:15:89:64:5d:c5:0e:49:da:0f:
02:b5:21:b1:e6:96:f4:34:20:34:a0:fe:75:98:fc:
47:09:b7:87:78:ba:bf:22:3f:78:4f:13:f1:d2:3d:
68:83:56:b0:57:d7:4c:77:ca:f3:d7:21:7a:8a:22:
8c:f3:ca:fd:39:d6:a9:58:66:11:9f:f3:47:6b:b5:
71:65:d0:1c:d1:78:45:a9:6b:4c:8b:9d:49:36:da:
c9:b7:e7:22:66:0a:57:41:16:89:97:07:72:ec:b9:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8E:B6:9C:FB:22:32:5C:F7:50:FF:56:31:50:DB:D0:44:91:BE:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/oo62nPsiMlz3UP9WMVDb0ESRvrs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.202.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c4:3e:38:9a:5f:d4:52:cb:c2:26:4d:4f:0b:b5:c0:9a:55:
21:71:e3:17:d5:c2:9c:62:95:d6:41:3f:40:0a:8e:78:9a:3f:
90:96:73:ef:13:38:97:0f:bc:c2:e3:18:2d:e2:78:9d:c0:be:
f6:6f:9c:ef:e6:f7:ae:e6:25:13:52:ad:6a:db:04:f3:19:c4:
fe:83:cb:d5:dd:16:dd:ea:df:2a:28:b9:e0:bf:4f:46:6b:cd:
61:02:ea:94:ed:d7:e0:3f:b0:33:47:a1:0f:77:03:61:39:a4:
13:28:51:86:21:7c:4f:d3:d5:c0:8f:86:26:18:64:69:7b:e4:
31:d8:fd:b5:0b:90:17:6d:e1:7f:27:6e:c0:62:5e:41:54:3d:
8c:65:a2:05:ec:a0:de:0a:85:c3:83:25:60:56:10:3b:81:d9:
2d:ba:00:8f:bf:1c:1f:9b:e5:f6:23:2a:b2:d6:1c:71:a6:7c:
30:0a:de:70:8d:12:eb:e0:81:09:77:48:8e:07:6f:35:2e:6e:
27:ae:72:9c:92:4b:7e:ff:18:27:31:ac:09:87:7e:a7:1e:12:
76:ed:04:82:1c:07:dd:34:ff:8d:0d:cc:8a:23:12:69:da:d8:
e1:19:2a:ab:ed:78:9e:c7:50:74:aa:9b:37:b2:05:33:4e:34:
f6:a7:f5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:14:24 2024 by rpki-client on console-ams.rpki-client.org