Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
File: COfXs7xMB5HAz_4_FVWrdz4-0W4.cer (raw, json)
Hash identifier: 0Pe6qj5Q0HT5XVXbe2Qx4cekAfA+mEeZ/YGh4UqjbfY=
Subject key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6E379B982C2294EF2618F63437B77
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199102
IP: 93.189.224.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e3:79:b9:82:c2:29:4e:f2:61:8f:63:43:7b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:b3:a4:56:4b:b6:1b:1b:d2:9c:2d:0e:2b:
db:99:dc:37:22:2a:24:c6:fe:93:99:45:a8:dc:df:
94:07:38:5f:6e:f0:c6:4d:02:a7:1d:6f:f3:fa:56:
e7:0d:a5:1f:aa:cf:e3:b4:ee:98:a1:4a:73:b6:4c:
c2:47:a9:60:de:a4:d0:8c:e8:2b:0b:97:af:49:02:
80:15:fc:37:97:69:75:e9:87:6a:43:8d:ca:55:c1:
a3:8a:26:5a:90:78:d5:61:71:3a:49:22:e7:c4:47:
e9:d7:51:3a:87:05:8d:d2:02:ea:75:49:e4:75:32:
0c:53:e8:ed:d4:cf:6b:c1:b6:8e:e7:82:f1:0b:31:
fd:10:11:19:f3:79:20:8e:09:f3:0e:ce:40:f0:3b:
90:0c:2c:c7:e0:93:84:3d:05:e3:24:8f:e7:a2:c1:
d0:da:1a:e3:c5:9c:c9:b7:4e:6e:56:fe:c7:61:b6:
c1:23:ab:b7:20:25:00:62:15:fe:93:a2:61:04:3c:
cc:0c:b3:97:15:a3:d4:a1:b0:95:8f:5a:96:b2:3c:
b0:62:88:84:f7:39:27:8d:29:d2:0d:d0:84:85:fa:
ff:f4:ac:bc:dd:8c:a8:f9:af:55:cd:ef:4a:fd:68:
f0:c7:bc:1b:91:be:43:13:ea:d4:cd:07:8a:67:db:
3d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.189.224.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199102
Signature Algorithm: sha256WithRSAEncryption
36:07:b0:ed:ea:1b:33:67:80:92:d3:dc:7a:5c:04:5e:98:c1:
e2:0e:86:41:f8:ba:f2:70:18:a0:79:3a:9d:0f:f9:b6:43:aa:
0d:45:cd:0d:0c:7b:c4:06:93:3f:72:8f:b4:a6:c8:a6:31:4e:
c8:b4:fc:48:14:9d:d3:48:bc:1b:49:a2:ca:61:d4:98:93:7c:
bc:8b:89:ef:51:cd:85:3b:0e:23:65:d6:1d:cd:0c:23:1a:fa:
33:c1:f7:35:b9:99:dd:ea:d2:5b:ed:f7:73:ce:7e:37:f1:48:
26:a5:e9:e9:5b:4a:ba:c3:98:f7:d1:89:d5:bb:63:0d:de:ac:
f2:ee:00:44:9a:64:af:31:92:e7:ef:21:94:d0:0b:5a:15:d4:
a4:c6:14:bc:db:ae:7b:07:db:f5:4d:56:54:9f:8f:94:92:d8:
88:23:cd:b3:45:cd:59:ad:9d:75:98:97:6e:b7:ee:6d:06:0b:
95:fb:85:7e:b8:26:ab:e9:b2:5f:0f:b0:d1:d4:1f:9c:cc:8d:
78:97:f7:4b:01:bc:ff:ef:4c:29:85:1c:f8:c8:18:fd:25:06:
8f:eb:f3:4a:14:03:56:a7:08:60:d1:a4:d1:94:30:09:2f:e2:
61:79:9b:c0:50:94:12:9b:66:2a:7e:1c:96:06:fc:f9:f1:61:
52:99:ed:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:45:23 2024 by rpki-client on console-fra.rpki-client.org