Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
File: rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer (raw, json)
Hash identifier: 6MhdQBiJYYGxXXIVox7Iy0EAM3M0Fe/FynAewt8uPSQ=
Subject key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BB1DEEC4C81F7FE4F86D2CBB32F665
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25386
IP: 62.80.160.0/19
IP: 185.117.240.0/22
IP: 2a06:9000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:1d:ee:c4:c8:1f:7f:e4:f8:6d:2c:bb:32:f6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:3b:f4:7b:ea:60:13:2d:08:9a:db:53:41:
5a:41:1b:94:04:3e:73:af:9e:df:47:ed:8a:88:a1:
59:8e:bd:af:4d:a0:3d:93:f7:9c:d0:dd:bd:71:10:
87:67:a0:79:0a:36:de:42:86:15:43:d8:dc:8c:e7:
30:a2:f1:2b:ef:79:4a:82:f0:aa:a4:12:78:36:52:
94:91:51:cf:c4:c9:03:86:11:10:02:34:cd:60:8b:
a1:4b:0a:05:6b:43:17:03:3f:9b:a5:e7:48:54:4e:
eb:66:eb:a4:e1:a5:9d:5a:c8:6f:81:a2:0a:b3:f1:
dc:ca:ef:51:aa:2c:3c:50:4a:82:b0:0b:f5:0e:c9:
69:5e:1e:05:e2:0e:09:a9:6c:70:5b:ac:e5:29:fd:
fe:37:b0:26:b6:58:ef:77:96:44:be:ef:86:96:6b:
09:7a:03:d4:29:5d:e4:12:63:6b:7e:64:cc:71:ad:
5e:84:59:a4:54:4e:06:16:dc:31:93:25:16:55:1f:
b1:8a:c2:7c:02:8b:3c:24:63:6b:1c:49:99:95:c8:
98:b6:cf:f8:70:fb:a8:1d:f7:a4:2b:8d:af:08:a3:
ed:91:4f:9c:42:e8:49:b4:9e:5e:21:19:73:9a:ea:
77:e6:1a:16:cc:f7:f6:95:24:41:74:2c:86:44:6f:
c3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.80.160.0/19
185.117.240.0/22
IPv6:
2a06:9000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25386
Signature Algorithm: sha256WithRSAEncryption
0b:b3:a3:8a:b9:54:19:a1:7b:32:53:d2:0c:8a:ee:19:dc:8a:
bd:25:29:76:e6:b9:f7:63:e8:ce:2e:28:ff:d7:2b:16:ce:f3:
ef:5a:8b:ad:16:b8:03:28:ef:15:7b:46:6d:af:32:0f:12:4a:
00:19:c5:1a:ab:60:52:a0:b0:9d:e8:b5:d4:82:8f:7b:08:13:
7b:c6:d2:23:b0:5a:00:57:6b:39:73:f2:64:03:96:ea:f9:45:
9f:dd:19:0a:f8:31:be:ab:94:ab:7e:6c:bd:f6:a6:ca:60:3c:
27:85:15:1b:33:e5:50:6a:32:c3:c9:00:f4:31:88:37:f0:75:
9e:90:5b:da:73:07:bf:70:27:cc:06:df:71:5f:92:93:21:cf:
de:8a:ec:ec:63:c1:21:ee:63:f0:70:a7:dd:b9:e8:be:e3:38:
7d:d3:48:38:dd:9f:8c:88:3b:ff:5b:b4:28:56:b8:a5:16:74:
b5:a6:08:f4:1c:ac:70:0c:04:a2:b2:76:00:82:8e:57:99:50:
e5:87:75:64:c3:ba:55:9d:e3:23:71:f0:06:7e:bb:ed:ac:e7:
54:0b:66:00:83:47:da:ee:50:e3:fc:44:6c:f0:48:13:1d:1c:
3e:fc:28:e6:40:f9:a0:6d:78:1c:4b:29:dc:a9:31:81:66:50:
ab:91:fc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:31:35 2024 by rpki-client on console-ams.rpki-client.org