Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
File: OExnnLr4wq171-FZCG_fCifSooQ.cer (raw, json)
Hash identifier: MY4qbPMR1uGQEbRDBx7foytJT15VACmZ+/zOe1SV9+c=
Subject key identifier: 38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F51E850E2A1A7409BAB7011437EE5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51816
IP: 91.220.107.0/24
IP: 2001:67c:2014::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:51:e8:50:e2:a1:a7:40:9b:ab:70:11:43:7e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:33:41:d5:1b:d8:99:bb:5f:a0:85:52:2d:
1f:36:00:db:4c:d4:1b:eb:c8:34:79:83:0c:b5:aa:
67:1a:80:50:96:48:c5:09:4c:5b:57:8e:ce:90:b2:
ac:6e:a8:9a:6e:d4:53:88:6a:aa:85:14:63:8a:c0:
83:42:e2:98:b0:63:c7:4b:58:85:bd:09:71:f6:51:
89:b2:18:64:6c:a2:70:2c:26:93:75:fe:ae:c0:94:
64:53:e8:b3:f9:a7:79:7f:ac:8c:f6:51:ba:72:75:
d7:49:6c:11:60:98:71:9d:43:80:1e:00:b2:a5:c1:
4d:05:38:fa:ba:c5:52:c1:6b:eb:cd:b7:a0:3d:c6:
37:af:3f:6b:84:fb:87:f9:52:eb:1a:f3:90:07:d2:
04:00:96:21:b1:68:7e:e7:c4:09:d9:c4:1d:14:e5:
57:36:e1:99:99:6e:42:ad:f5:ed:09:5b:4f:73:92:
26:26:11:79:ca:1c:43:ec:62:c7:35:04:81:05:63:
de:dd:74:c5:8d:3c:58:46:9f:f3:51:2a:fb:9f:f9:
b7:03:1f:74:52:d8:8d:ef:f0:12:4c:1f:ed:86:aa:
8f:59:93:55:09:aa:40:19:8b:b1:c4:e7:54:5b:a7:
0a:0d:1a:16:c9:b2:64:84:bb:02:35:ae:ab:98:6e:
79:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.107.0/24
IPv6:
2001:67c:2014::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51816
Signature Algorithm: sha256WithRSAEncryption
7f:19:1f:b3:f5:9e:09:0b:ba:f6:56:cc:03:d9:b0:be:f8:bd:
4e:d5:67:1d:41:eb:97:b3:c3:69:4a:21:fe:df:b6:f4:25:59:
73:e2:78:3b:1f:b5:de:f6:c1:86:02:49:b1:77:11:c4:c6:c9:
7c:43:66:17:ee:74:e5:99:91:4c:00:13:ec:3b:c1:27:dd:b2:
a4:98:08:1a:ec:f9:9c:23:b6:93:b4:88:3d:8c:43:78:23:b3:
10:d6:86:c1:3d:a9:3e:e8:0c:1f:c5:8f:6f:f6:89:7c:46:9a:
83:5d:a3:f2:59:90:19:7f:d4:46:fe:a7:b9:8a:91:89:76:57:
ba:2a:87:de:22:af:90:7f:bc:e6:35:31:e8:b1:21:a8:f1:4a:
6a:e4:41:2b:43:4a:67:68:d2:6f:2f:17:40:95:fa:fd:bf:92:
99:6c:58:8d:ba:bc:9d:03:0f:01:fd:d4:3c:3d:e5:6a:62:cf:
81:06:bc:0a:68:27:ba:0a:86:ad:73:09:34:e1:9b:3c:33:76:
bb:cf:5c:f1:c6:b5:cd:9b:60:c9:84:81:f1:68:12:1d:5d:a6:
4d:60:d5:53:06:64:3d:14:73:7e:d3:7f:bf:95:e9:04:c5:f3:
33:35:59:d9:6a:a8:97:79:f1:5d:1c:c5:39:1b:43:6b:e8:46:
32:b5:88:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:31:44 2024 by rpki-client on console-fra.rpki-client.org