Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
File: t2lbmOCKN4vw3JRNLxpgofaVSYE.cer (raw, json)
Hash identifier: AqCQtm99AIAnUEhxb2CYMZX5M9Gi2j3YJTR5cR/LyL0=
Subject key identifier: B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4256120E7AAF650D7F016D3050210B1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42841
IP: 88.212.0.0/18
IP: 185.61.16.0/22
IP: 2a02:130::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:61:20:e7:aa:f6:50:d7:f0:16:d3:05:02:10:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:25:c3:3d:69:bb:92:25:1d:a7:4a:47:14:
c7:99:47:87:ae:b1:4d:07:fb:77:42:60:a3:78:9c:
41:b8:13:a6:61:16:0f:eb:75:cf:c9:0b:33:3f:0a:
94:06:84:d3:35:cc:6a:15:b2:79:d4:3f:04:81:ed:
c6:0b:87:b2:25:40:62:f8:e7:d1:c4:cb:fb:40:f5:
3e:7a:14:23:75:49:9e:02:f1:e8:a4:3b:9f:4c:45:
b2:1e:d1:61:0e:c6:0f:f4:4e:73:fd:f7:3b:be:5f:
f2:90:1b:3b:ba:f1:00:45:48:6c:32:5f:7b:15:0a:
46:27:f6:fe:df:1c:c6:83:7b:f8:ed:2c:61:19:6b:
ed:d5:1d:3e:7f:38:74:de:10:57:78:1d:c4:0b:68:
de:c4:8c:c5:2e:db:c7:9f:22:19:1b:f3:c6:0c:28:
bf:2d:d8:e8:d4:9e:ff:c8:14:32:90:34:c7:d0:ce:
88:fb:1e:94:ee:2b:49:9e:c1:d2:34:c7:93:24:59:
f2:47:07:57:da:86:fa:77:4f:5f:3d:bc:e3:b3:df:
85:f3:99:12:8c:06:71:42:ec:5a:44:fa:85:f2:5b:
d2:aa:10:f2:49:14:6a:0c:ff:6c:c4:4b:44:ce:0a:
89:c1:f6:17:bc:bf:43:93:17:4b:06:07:c1:6f:6c:
78:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.212.0.0/18
185.61.16.0/22
IPv6:
2a02:130::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42841
Signature Algorithm: sha256WithRSAEncryption
90:dd:c7:ea:39:30:15:f0:e0:3c:3c:94:68:ba:9b:aa:ba:51:
77:49:31:10:03:52:f5:ae:c4:ec:35:94:0f:74:3e:e5:f4:65:
b8:95:9a:46:c9:5c:07:20:1d:c4:4a:4c:6f:51:05:03:a0:3f:
5b:39:d5:82:01:d8:98:38:06:95:99:9f:a7:af:fd:e8:85:ef:
d7:44:f6:2f:13:6d:e3:9d:0a:b7:9b:89:d3:1a:49:be:36:26:
c0:e6:e7:9e:2b:2a:fc:ba:8c:06:67:62:d5:7e:4f:e5:56:2c:
40:33:1e:7a:53:ec:9b:2f:75:99:6f:f9:3d:0f:4e:8b:27:7c:
65:3f:7f:98:bc:74:c0:33:8b:d0:85:41:c4:42:16:75:f6:23:
76:1b:36:35:cd:41:5c:b9:77:d0:5e:7f:4e:1c:3d:d2:33:fb:
10:6e:92:bc:7c:17:ce:f6:e3:5b:e1:29:35:46:5f:a8:27:67:
34:60:5e:ca:13:ee:45:da:2a:8a:3b:a8:70:09:d1:07:a4:17:
53:bd:96:2d:ed:23:75:4e:f1:2b:01:a4:9e:63:fb:03:46:bd:
01:00:66:fa:56:cd:f2:79:a8:fb:45:72:d4:24:e5:2d:ae:9d:
fb:88:11:8c:ea:17:a1:bc:25:5c:53:38:37:22:68:2d:44:59:
4b:e7:b2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:47:07 2024 by rpki-client on console-fra.rpki-client.org