Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
File: O8o0owNBd9CEM40zsIm34DzKOoo.cer (raw, json)
Hash identifier: K5S8myqNcizjRy6aV8OPQgjdnFkpRNsoDY8+pnihtf0=
Subject key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8401AB88FA48F910F883B6672AF65
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 13289
AS: 29624
IP: 82.212.192.0/18
IP: 185.111.32.0/22
IP: 2a00:cb0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:40:1a:b8:8f:a4:8f:91:0f:88:3b:66:72:af:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:6b:3c:91:00:dd:e2:b9:45:20:95:40:c3:
37:c2:73:a6:68:f0:c9:b7:bd:b9:64:3c:56:ec:e2:
b7:96:d8:85:11:8b:52:8f:bc:7c:4b:ea:a2:a0:f8:
59:59:bd:ac:c0:39:ab:7b:54:c6:22:50:a8:be:9e:
79:29:69:83:9b:a5:90:bb:0a:15:7a:82:c1:af:12:
74:5e:c3:db:a4:cf:65:94:bc:4f:65:50:93:38:93:
6b:e8:7d:13:c3:1f:76:45:a8:55:15:c0:0e:18:b1:
6f:d7:f5:e2:a2:2f:dc:63:62:11:c4:f8:68:01:db:
98:8a:e0:3d:ee:ad:e2:b4:82:7f:a8:85:ed:51:93:
98:aa:d8:6f:3a:7c:fc:87:7b:d6:b4:bc:80:eb:d6:
ce:43:69:5e:76:98:5a:be:08:de:da:7f:ae:76:49:
4a:83:f5:40:60:b5:8a:3e:ef:11:b2:01:9a:3b:23:
ad:8c:62:19:65:e1:77:0c:26:4f:f1:08:1f:f7:68:
63:dd:38:fc:f9:7e:b5:46:a4:0c:1a:bb:45:4c:d8:
83:ce:cd:69:a5:9c:e9:36:b1:36:fc:a5:41:69:c1:
22:ae:5e:97:8b:71:af:0c:93:e1:9a:c9:55:69:b2:
50:40:cd:36:1d:31:6a:4a:50:92:2d:e3:d2:6a:a6:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.212.192.0/18
185.111.32.0/22
IPv6:
2a00:cb0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13289
29624
Signature Algorithm: sha256WithRSAEncryption
53:6f:f3:1d:af:32:9b:af:0c:e0:6c:ce:82:1b:94:8f:24:36:
25:59:92:3d:cc:bd:4d:04:a3:18:eb:91:7f:15:66:a5:d0:0d:
8d:e4:93:2e:4b:54:42:42:df:b8:47:5f:d7:4b:14:2a:f4:e8:
21:50:cf:b5:8b:54:31:79:3f:a9:0c:45:b5:2c:9f:3c:3d:3c:
91:21:20:49:8b:18:b6:7a:c3:4c:a0:5a:86:6a:a4:5a:cc:db:
4a:73:97:f5:45:6f:a0:df:c2:c3:2f:5c:3d:91:b8:41:5e:b6:
1b:1e:41:04:72:76:2b:eb:42:c2:21:c0:cb:14:ec:97:c6:18:
19:f5:7b:e0:17:41:28:90:c1:e9:24:82:d9:ec:e4:b6:75:3c:
19:40:ac:62:49:d2:9e:5e:65:35:1c:ec:d4:fa:2a:be:30:4b:
80:99:36:37:03:70:46:59:5b:0c:e1:1a:1a:fc:79:0c:f4:5c:
93:eb:06:8f:4f:5b:a0:0b:3e:5d:8a:65:9e:27:1e:37:af:06:
3d:24:03:99:b7:fc:cb:56:75:97:50:89:fb:64:df:48:06:5b:
99:d5:b7:18:b0:b6:a4:5a:72:4b:a2:47:87:d6:6b:7a:40:12:
d1:07:1a:ec:f2:80:54:4b:8d:2f:ba:c8:51:c3:9f:f4:a1:48:
28:bc:2c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:41:51 2024 by rpki-client on console-ams.rpki-client.org