Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
File: AOC06vnBB5HzU7qYfeI2ChOEF70.cer (raw, json)
Hash identifier: My+NKwa91CtqyHGwb+SC7XuhUbYo2t32s6vIxdWYbJE=
Subject key identifier: 00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC727761D1C3494E4540DE97A7A9008C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 77.223.4.0/22
IP: 195.93.227.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:76:1d:1c:34:94:e4:54:0d:e9:7a:7a:90:08:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:28:38:d1:7f:d0:a0:00:5b:bf:94:d9:87:
6e:0b:d1:0e:7f:84:d3:0b:04:96:9a:86:36:db:f6:
74:a5:cd:9e:b9:1f:e3:f2:07:48:4d:0f:9d:2a:83:
f7:63:19:0d:ac:1b:c3:90:e6:b4:38:95:c5:84:c4:
b3:2f:98:6b:e3:a6:df:5d:26:f7:42:bf:60:c7:ed:
5d:30:f9:47:b4:ab:cf:46:22:b2:0f:21:b9:7b:93:
13:5e:a4:12:76:ed:7c:18:b5:28:c1:32:5c:16:94:
10:27:69:20:88:bf:9a:2f:bb:fb:0f:a0:d6:71:61:
9a:00:90:9c:94:66:d9:30:ec:31:97:52:ee:30:35:
bb:35:b0:b0:c9:5e:7f:0a:12:15:b4:97:75:44:2b:
06:30:b0:d1:78:41:b3:fb:30:0c:aa:54:32:00:1a:
34:73:a4:9c:f8:c0:94:a1:79:7c:51:40:04:a2:31:
c5:13:2c:e6:cb:eb:0c:3a:05:42:e6:53:59:0a:b5:
88:bb:e1:b1:b2:0b:6e:29:53:cd:58:13:eb:d8:89:
58:19:a0:1f:1f:cd:eb:ac:a6:1a:b3:74:9c:9e:b8:
95:f5:87:89:10:63:98:17:b2:27:11:64:47:62:3a:
1a:90:a4:a2:85:e9:2b:bf:b5:f8:a0:2b:6b:e1:5e:
c2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.4.0/22
195.93.227.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:1e:c4:61:33:f0:78:ba:0d:07:a7:54:ef:d3:2e:fa:cb:d2:
8d:6d:7e:af:44:fd:77:c6:a6:5f:fb:b1:47:df:eb:0c:53:a2:
0d:d7:8d:22:95:be:4b:d0:a5:4e:2b:5f:29:38:47:b0:35:03:
2d:21:fa:af:2b:cd:33:0a:12:ea:b4:40:56:65:48:77:3a:d1:
ed:09:48:62:87:fc:77:16:00:f1:78:1f:1b:90:f0:09:5a:fe:
42:13:7a:67:c1:42:cc:28:61:31:c8:ac:22:d6:a6:09:11:27:
c3:1b:5a:e4:9a:98:a7:13:be:21:0e:3a:89:e2:54:18:1c:d5:
ca:57:cf:06:46:56:83:37:7a:43:50:9f:ad:18:94:6e:1d:85:
fc:dd:fc:3a:dc:27:c8:d9:4a:9d:c9:ce:ab:5a:47:72:8e:da:
c8:aa:fc:63:c0:dd:55:9d:d7:74:74:32:3c:d4:24:9a:f5:37:
3f:9b:0d:df:ec:e6:8e:95:d5:ce:37:13:aa:f0:be:52:83:bd:
f2:73:74:f6:6a:df:20:a3:96:52:9b:ce:25:f3:de:c9:a1:4a:
1c:73:57:44:8e:a6:67:32:34:c4:20:15:56:f2:da:77:a5:b6:
e0:f3:22:a2:ef:9b:64:34:10:2b:b0:73:e7:39:85:75:09:92:
58:db:37:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:34:48 2024 by rpki-client on console-ams.rpki-client.org