Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
File: O-lZPSkOAlAninOzE1UDKTJ71Yk.cer (raw, json)
Hash identifier: 7G7k3fwDGw2hyvVpRKXkYgC39cF8btMrAV6vTAyhGi8=
Subject key identifier: 3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D1B5B4E33BDDF46016927F9E2207F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201466
IP: 2.57.108.0/22
IP: 45.134.152.0/22
IP: 185.73.168.0/22
IP: 185.160.168.0/22
IP: 185.222.164.0/22
IP: 193.36.144.0/22
IP: 195.191.48.0/24
IP: 195.242.72.0/22
IP: 2a03:4460::/32
IP: 2a07:bec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:1b:5b:4e:33:bd:df:46:01:69:27:f9:e2:20:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3be9593d290e0250278a73b313550329327bd589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:25:da:90:41:86:7a:49:64:cf:d7:e6:1e:4b:
99:c2:56:dc:85:03:18:f6:cc:67:9d:a1:ad:94:b1:
b1:dd:f2:4d:47:20:54:46:15:6f:bd:cf:6b:dd:9e:
c1:9b:6f:bd:ad:95:68:64:41:ea:d2:5e:6e:04:52:
b6:c7:d6:18:a8:43:be:76:fa:8a:9d:fc:09:93:a0:
71:51:76:60:49:8c:7e:3c:25:a8:b7:f5:67:ea:4f:
53:02:10:f1:8f:c0:18:37:14:95:fc:b3:6e:35:65:
2d:ae:7e:de:84:85:93:e1:84:52:29:a8:20:52:25:
e3:6b:4e:6c:d9:ef:0d:3e:a0:c2:f3:1c:c5:58:48:
8f:dd:f5:33:f5:98:82:b8:c4:84:8a:e5:3b:01:95:
32:9f:e3:83:15:0e:00:47:a9:52:58:92:02:d0:6a:
6c:2e:74:09:00:67:02:d3:92:fd:7b:85:f5:1e:7b:
64:9d:2a:72:5c:f8:dd:8c:31:0b:07:4d:1e:56:df:
5d:47:49:ae:f8:30:31:02:b1:10:3c:1a:cc:a3:d1:
71:75:a7:30:a5:ad:fd:70:1f:ac:d7:92:e1:0a:0c:
1a:43:6c:09:15:b5:c4:3b:e8:d0:fc:88:77:bd:66:
ea:5f:40:23:3d:fd:01:60:fa:a2:de:3c:ff:df:a5:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.108.0/22
45.134.152.0/22
185.73.168.0/22
185.160.168.0/22
185.222.164.0/22
193.36.144.0/22
195.191.48.0/24
195.242.72.0/22
IPv6:
2a03:4460::/32
2a07:bec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201466
Signature Algorithm: sha256WithRSAEncryption
26:7e:97:40:1f:ef:07:57:47:2e:8d:23:fc:1f:3d:e0:57:89:
96:1f:6d:19:a6:71:e7:4e:c0:98:ec:db:bb:4e:b9:30:dd:1e:
04:8a:95:91:d4:e4:37:87:80:6d:4d:80:8b:bc:06:82:78:a0:
31:f9:3a:de:b6:45:a1:3d:c4:8e:72:3e:bb:54:91:4e:07:06:
30:73:b9:f7:83:bc:78:50:bf:b0:66:37:59:8a:64:fb:32:d0:
32:f3:66:e7:bc:51:5f:a4:8c:46:e1:a4:e4:61:92:73:c2:ae:
7b:46:cf:af:b5:7d:11:7e:15:93:93:b1:3d:a1:37:7b:7b:a5:
54:ee:db:4f:fc:ae:80:06:f6:ae:56:4b:f5:3f:57:6d:c2:64:
86:46:70:00:03:14:e8:93:5e:6e:15:95:0a:91:3e:a8:c1:5e:
74:16:ec:e4:d7:ac:69:39:9d:75:ae:36:d9:fb:df:b8:69:44:
02:76:da:7a:ea:fe:2c:2e:16:58:b8:db:e1:12:32:66:51:d9:
5d:65:3e:2f:3f:ea:12:ca:08:e6:05:28:b3:f1:64:34:5a:aa:
93:32:0e:4e:40:ed:c1:99:1d:f1:1f:c7:8f:13:90:17:c8:7b:
3d:97:02:4a:9f:24:59:d2:0d:29:79:8f:cd:a0:42:fd:1c:09:
e9:f1:54:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:58:05 2024 by rpki-client on console-ams.rpki-client.org