Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
File: O62c1QNPgVWPg9I47KQGMyvXuoU.cer (raw, json)
Hash identifier: GEfT76CakkCKLLUBYdV89QkmJhtAZEza44MgePLGWQo=
Subject key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E1066798835DE0701259914C1773D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44058
IP: 185.253.12.0/22
IP: 2a0c:3040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:10:66:79:88:35:de:07:01:25:99:14:c1:77:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:02:18:cc:17:7e:73:6c:81:56:3f:64:d3:
c7:61:30:66:ca:c0:fd:23:35:e5:ca:06:c0:19:f4:
ef:a4:98:db:97:5d:7c:38:7a:3a:ed:0d:36:59:d8:
d5:31:de:62:d1:0f:60:a0:98:ff:4d:09:09:40:1f:
17:40:2b:5e:24:00:16:82:53:d1:de:bf:01:a2:1d:
ae:9d:18:d9:ac:ad:81:83:dc:8f:d7:a3:d0:c4:69:
e2:66:5a:98:8e:ca:5e:cd:b6:7a:12:ae:bf:f3:e3:
0b:91:c8:bd:3d:b1:a0:8f:7d:30:ef:cc:95:ab:58:
de:c0:01:45:e4:6f:10:bb:f4:0b:51:2c:bd:34:f4:
93:74:44:b5:06:f5:6f:fe:8b:a2:f9:70:90:42:fd:
05:0d:84:09:a7:12:78:27:da:a9:0a:28:0a:fb:56:
aa:f8:46:08:57:19:fa:cd:ab:7d:5b:53:39:48:0c:
3f:16:92:59:1d:65:3b:39:13:2b:ca:f9:70:90:0d:
48:15:59:b1:ac:73:75:fb:7d:92:af:d4:88:da:e8:
21:95:c1:e5:6f:c2:cd:87:b9:57:98:53:2b:ab:a0:
fa:09:96:b8:19:18:e4:a2:74:de:7e:cf:e2:49:3c:
66:5e:10:18:c9:dd:d3:ba:ee:9a:eb:f1:ca:e3:df:
3a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.12.0/22
IPv6:
2a0c:3040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44058
Signature Algorithm: sha256WithRSAEncryption
54:a9:2a:6f:cb:23:e4:6c:d8:8f:93:59:fa:7b:e4:44:68:38:
cc:e8:d0:b8:3d:0f:a0:cd:32:2c:c3:9a:d3:43:0b:75:52:0f:
ad:07:de:71:b9:16:78:5e:09:78:6a:ab:45:13:13:ad:e8:75:
03:77:e7:f0:68:1f:c7:83:68:88:d2:69:0d:e6:36:64:75:e4:
ac:a1:c5:a6:b3:1f:36:7f:f0:7a:86:46:ec:0b:57:dd:1d:7b:
59:c4:34:1d:d3:bb:4f:27:3a:f7:22:79:8b:80:f5:4f:5f:a9:
17:69:92:87:44:8d:02:ba:9b:5f:b0:0b:ba:ed:4c:e3:cc:08:
74:16:56:11:68:9f:b4:a7:65:ec:64:a1:2c:55:d1:7f:f3:1e:
84:65:08:19:91:f1:8a:46:e3:23:ce:03:0b:a3:0c:ea:ac:24:
0f:7c:f9:9f:d0:25:08:b3:3a:8e:06:ce:54:26:a1:54:8a:c2:
43:bf:de:96:15:a9:ea:87:ce:98:fa:f6:bc:20:56:72:18:19:
0f:42:7f:d6:90:ee:15:92:4c:9b:b1:46:b4:35:78:c8:56:b2:
36:c5:c8:2f:1b:92:eb:ad:46:74:b2:4d:d6:0f:5b:6a:ab:3c:
4c:4e:3a:9e:45:c1:f9:57:9f:ee:dc:08:88:9e:92:dc:7e:21:
91:d6:e2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:58:08 2024 by rpki-client on console-ams.rpki-client.org