Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
File: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer (raw, json)
Hash identifier: YdwRqvZLYDLeYUW5Gy01dneYpbVPCdIWx+oM4xmn7gY=
Subject key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E3DA7C43D0495D06967F85B4F6BB763FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 14 Mar 2024 15:49:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.172.58.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:a7:c4:3d:04:95:d0:69:67:f8:5b:4f:6b:b7:63:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 14 15:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:fb:88:35:6b:fe:66:a6:47:ef:14:97:e6:
25:5b:9d:27:48:55:75:14:48:03:73:fa:bc:96:cd:
50:6b:a5:24:da:8a:96:f2:8f:af:fe:99:57:17:c0:
a2:c8:75:24:d5:36:12:76:c4:a6:14:2a:7f:3e:f6:
91:0d:4b:a6:99:93:16:3a:55:5c:86:3b:13:c4:63:
1f:c2:51:4b:97:a8:97:c3:95:ef:72:ef:a7:50:3a:
f2:55:4b:11:1e:57:e5:8d:34:bf:72:7b:c1:c9:ae:
f7:de:90:9f:29:94:0a:06:2c:be:57:10:35:ab:a4:
08:40:20:4f:c6:b4:57:0b:ee:f4:d8:79:37:65:e9:
c9:8e:d6:7c:4b:ca:fd:00:b6:ef:03:90:c8:49:a7:
93:62:48:fd:25:10:0c:a9:a1:d0:63:4d:7a:98:56:
ed:5f:4f:2d:73:f6:81:14:72:c6:fd:1c:40:b1:03:
e5:27:cb:e0:29:34:20:3f:f5:49:f8:5b:a1:ee:f1:
d0:de:e1:75:88:ff:86:99:28:61:7a:32:bb:04:b1:
ad:e0:87:8b:26:a8:a3:7a:7d:88:1c:ab:c0:b0:ec:
b1:ad:63:bb:b3:ec:f8:ab:1f:a0:23:82:2a:8c:75:
b7:de:3a:cb:11:86:1f:10:f6:15:d2:0a:af:91:a0:
cd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.172.58.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ad:b2:ae:83:24:94:3a:24:1f:c9:8c:58:00:1b:6c:55:1d:
d2:7a:a6:8b:ee:03:4c:d6:8f:d7:5e:df:14:17:6a:25:98:07:
be:dd:ec:b0:80:79:dc:9c:ff:2d:b9:1e:07:25:e2:33:89:0a:
df:00:61:4a:cf:e9:54:3d:ba:c6:b2:ae:12:b0:33:34:4b:7b:
4c:9d:40:bb:14:6a:ec:76:b1:a6:f7:57:e5:96:1d:8d:81:ba:
63:9b:98:5d:1a:fb:16:aa:c7:ea:ee:e2:59:72:18:de:69:c3:
60:82:65:bf:22:4e:b6:58:f5:39:22:bc:4c:ea:15:47:83:ce:
76:fd:4d:f4:20:b8:cf:90:04:28:58:93:ae:27:14:89:c0:73:
1e:8d:34:8b:d5:95:79:86:a2:bf:af:f3:50:e5:ef:47:f8:c3:
d1:8f:60:23:6b:57:ff:48:ea:bc:a5:fe:a1:0f:59:93:d1:a6:
fb:0d:f4:38:66:a6:0b:30:dd:0c:d3:f4:8d:2a:56:01:45:71:
83:46:6a:0f:c2:df:2e:66:8e:c8:53:0b:6b:e9:83:de:6b:e0:
62:a2:db:61:01:fc:28:70:78:b1:09:3b:d7:81:40:6b:5c:3e:
2f:1f:6d:81:21:b2:db:a1:d6:3f:bc:95:f3:34:ea:10:8a:7f:
a5:e4:c2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:49:00 2024 by rpki-client on console-fra.rpki-client.org