Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
File: O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer (raw, json)
Hash identifier: u4ztIuC41GQCJOiPfH43tsgqrpfg1Z74q/H879OZKmE=
Subject key identifier: 3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01912D3186773BB42FAFACB56334B4264FEE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 07 Aug 2024 14:15:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 21406
IP: 91.211.196.0/22
IP: 193.109.152.0/21
IP: 193.150.174.0 -- 193.150.179.255
IP: 193.164.234.0 -- 193.164.241.255
IP: 193.188.208.0/20
IP: 193.246.126.0/24
IP: 2001:67c:1110::/47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2d:31:86:77:3b:b4:2f:af:ac:b5:63:34:b4:26:4f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 7 14:15:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:5d:f4:ea:60:78:60:da:4a:39:c7:97:e4:
70:cf:2d:62:c9:7e:79:5a:61:d4:72:22:85:f0:6d:
ff:42:3d:2b:ad:4c:a9:08:44:ae:ed:73:d3:23:5a:
92:04:6b:fd:be:12:2c:da:b7:fa:e6:37:f5:68:27:
65:82:c4:6c:d3:00:af:d5:96:0c:22:bd:85:a7:e4:
f0:4f:15:26:b9:d2:03:5a:e3:5a:f2:da:da:3b:41:
80:e1:c2:f9:af:38:34:6d:82:a4:0c:ed:9d:e3:1e:
71:0d:91:1e:63:2e:b0:88:b2:11:0d:81:81:4a:c2:
8d:a9:81:30:1a:e5:38:7a:f8:ca:b7:6c:22:39:5e:
63:d8:e9:d5:bd:6d:4b:36:5a:3c:2d:d9:27:ae:37:
2b:e4:94:84:78:22:b8:92:14:c6:0b:48:20:d1:49:
35:e1:55:74:3a:e1:fd:ac:3b:36:87:e0:48:af:cb:
9b:42:7e:ac:f6:c5:88:55:ef:ef:80:75:51:06:45:
95:41:98:b7:8b:01:bf:51:9e:b4:f8:83:cd:74:91:
17:1b:45:ff:e1:f4:a3:5d:70:05:91:dc:34:41:c2:
87:ee:df:c0:ce:1e:eb:ca:63:c1:75:68:4b:c3:62:
20:f2:0b:51:88:19:61:8c:ee:ba:12:f8:13:06:83:
e5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.196.0/22
193.109.152.0/21
193.150.174.0-193.150.179.255
193.164.234.0-193.164.241.255
193.188.208.0/20
193.246.126.0/24
IPv6:
2001:67c:1110::/47
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21406
Signature Algorithm: sha256WithRSAEncryption
60:7f:96:19:32:c0:de:dd:15:53:23:87:21:d3:1d:ae:2c:95:
fe:41:c9:c1:fd:05:7f:be:d0:b2:b4:f8:9a:e0:e2:5b:57:9c:
b8:af:68:8a:7b:bb:f3:99:d8:e1:a6:a4:2b:14:bc:bf:d2:1a:
76:99:48:75:b5:04:c9:f7:36:a9:cc:2a:ac:a9:0d:1d:50:eb:
2d:d6:ed:3b:34:f5:8d:b6:7b:4c:12:b1:38:ed:69:9b:e3:b5:
e1:23:44:b3:8d:e6:fd:d8:9f:bb:2b:27:f4:b3:f5:b4:a4:0a:
8b:9b:ca:cc:da:54:0c:89:69:ef:65:cf:a3:87:f8:cb:17:75:
60:a4:7c:bf:c0:5f:31:8e:aa:5e:52:fc:83:5a:8a:e0:65:04:
28:7a:7a:04:ef:38:d4:83:18:55:e8:13:03:43:76:cc:ad:d6:
39:41:14:83:14:d8:c9:d1:2a:91:09:44:8d:31:28:46:fb:20:
b5:2f:fe:34:48:92:c0:bb:a3:7b:01:c2:ba:3e:1a:ae:10:75:
b4:56:fc:7b:d3:15:80:39:f0:e6:9f:0f:c5:34:72:39:c7:1b:
c5:78:28:f6:0e:8f:6a:fe:12:0c:12:a7:79:76:5e:f2:ae:14:
87:b1:7d:60:67:81:2a:fe:2b:45:4b:2b:cb:b9:f4:98:df:f8:
a7:ca:b6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 23:20:20 2024 by rpki-client on console-fra.rpki-client.org