Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
File: OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer (raw, json)
Hash identifier: Ao4E1nV7OE7A4JDzpTJW5vhzQFhFgPX8B8oDjxF4aso=
Subject key identifier: 39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191464EB95D1659AFE833006B5B7D3DBA7F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 12 Aug 2024 11:17:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198600
IP: 91.237.64.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:46:4e:b9:5d:16:59:af:e8:33:00:6b:5b:7d:3d:ba:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 12 11:17:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39348867dcb2956aca65d08348e440d4727a3743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:f7:00:27:f4:0a:db:33:4c:30:77:bd:40:
c4:4e:53:8a:49:b2:85:7d:36:cd:cc:e6:ac:b8:d4:
9f:42:0f:a4:89:13:e0:56:be:93:5c:d3:e2:f0:09:
4d:1e:de:ba:62:9b:23:b9:90:74:86:92:ac:8f:0d:
84:64:c1:36:6c:c3:3f:34:b0:52:5c:92:75:8b:00:
37:5d:5f:b2:01:bb:58:84:74:c5:1d:0d:98:d8:d6:
9f:03:3d:37:1b:3c:ed:75:83:7c:d2:4b:22:1d:13:
56:e3:72:00:c2:79:af:71:b9:5b:c6:71:05:29:fe:
d6:b1:b1:92:cf:50:10:ae:41:d4:03:bc:4f:b1:bc:
f3:34:02:51:fc:69:92:de:30:bb:9d:e6:05:44:4f:
7f:4f:b7:59:82:09:47:8d:af:a2:3f:be:a0:f6:e0:
aa:03:76:0d:5b:74:72:31:75:c8:b9:2d:f3:0b:a9:
74:f2:6c:b6:b2:6a:da:3b:9e:2d:73:dc:69:2b:e3:
28:75:67:3e:e0:5c:12:8a:ab:26:f0:78:b1:94:d5:
63:d6:ba:89:c0:5b:ee:4d:7d:0f:b3:f1:da:8a:ac:
1d:a0:18:cd:ce:0d:c7:6a:52:58:e0:e0:57:1a:78:
cc:0d:7c:f7:ad:dd:6e:9b:da:96:3a:58:ad:70:38:
e0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.64.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198600
Signature Algorithm: sha256WithRSAEncryption
42:af:ec:81:ab:70:4d:8f:c6:cd:50:7e:e5:e8:0a:3b:47:f5:
77:5c:01:d0:ce:37:77:52:b0:ea:52:7a:ce:4e:6b:3e:c7:f8:
28:5a:98:22:94:cf:ec:eb:6c:b1:3c:b1:fe:e2:fd:6d:47:5b:
18:6b:e8:4c:02:39:9c:18:2e:d4:73:cd:da:07:ca:99:c7:d0:
fa:a4:e7:52:33:df:a8:a5:0b:92:db:df:13:cd:76:48:4b:90:
5d:97:23:83:d9:50:26:60:bc:33:21:d6:a5:bc:30:5c:d1:14:
ab:1a:54:09:8a:0a:56:52:75:6d:58:16:62:6b:a0:5a:fb:3b:
dd:05:47:11:ea:8f:78:b5:fb:84:15:cf:00:28:2f:f1:fb:92:
48:90:ff:00:2d:13:b5:e2:4b:2d:c5:11:55:3f:fe:e9:18:32:
63:31:8d:b1:e1:29:8f:61:31:74:d2:02:73:e5:bc:8e:a0:c9:
43:ed:f4:35:0d:47:7c:69:c1:ed:0c:78:a9:e7:7d:09:d9:f7:
5f:d1:9a:59:4e:0b:0a:06:8a:5b:8e:2c:88:d1:c5:27:69:5e:
18:1e:86:bb:3d:34:cd:a0:b7:e6:08:a1:be:59:77:88:12:fc:
3f:88:53:da:3f:da:7c:87:00:1f:d3:21:a6:be:7b:7b:17:44:
ed:62:38:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:25:05 2024 by rpki-client on console-fra.rpki-client.org