Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
File: OUiGnOVLnTsvPjmu4snI6xnLWw8.cer (raw, json)
Hash identifier: ayNfSDqpzesfOSCkTXv9ipnPJ+9KyeM/ll7Xm2ZHRiw=
Subject key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7932F2761C3D63C5235D29FD43D6983
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201503
IP: 82.163.120.0/22
IP: 82.163.132.0/22
IP: 185.72.208.0/22
IP: 2a05:3950::/31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:2f:27:61:c3:d6:3c:52:35:d2:9f:d4:3d:69:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:ba:40:17:d5:6a:89:94:fc:53:9d:bc:db:
e2:08:ba:79:4c:03:a2:84:23:82:16:af:3f:25:a3:
2c:a4:97:2c:ab:8a:eb:43:ac:63:b2:e5:4a:9a:a8:
2e:98:d6:f7:51:86:a3:fb:ec:c3:2c:a7:ed:d0:10:
65:3f:99:ed:11:4a:31:29:e4:ff:77:ad:ff:38:c7:
11:4a:df:e2:b2:82:8d:00:36:2c:4b:1d:9d:36:f0:
5d:3b:77:d1:c7:dc:2a:18:b5:9a:eb:1f:e5:cd:0a:
e5:6c:0d:69:da:cc:19:ed:bb:37:5c:84:5b:a5:26:
47:57:1e:07:e3:be:3d:41:c6:2a:1a:45:40:61:de:
91:74:69:73:c1:8b:43:42:fe:8f:28:04:03:9f:2d:
77:7c:74:6b:9a:1b:5a:81:f0:95:3c:74:60:e2:54:
d4:8d:ba:6d:e5:83:c0:0d:f4:aa:e0:ec:7a:92:ab:
80:7c:14:a1:91:6c:21:e7:50:b2:6a:13:34:c7:6d:
92:e9:1e:96:dc:76:19:29:41:94:b9:eb:21:a9:bf:
03:e0:c6:26:7b:28:da:9a:1a:60:95:70:34:6c:93:
aa:11:84:3e:76:fa:23:9f:24:3c:a6:c7:d0:46:c2:
32:76:be:41:93:a6:da:03:a3:bc:74:0e:52:3e:74:
1a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.120.0/22
82.163.132.0/22
185.72.208.0/22
IPv6:
2a05:3950::/31
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201503
Signature Algorithm: sha256WithRSAEncryption
52:0f:36:9f:be:c2:da:3f:19:da:91:84:95:3b:10:0a:03:34:
62:79:6c:d2:23:16:1f:02:dd:3b:0a:a7:ba:dc:bc:94:c1:4f:
2c:9b:d4:68:7e:22:a0:e8:79:d9:f6:10:68:b4:39:29:b0:c1:
a5:ce:e3:34:85:7f:ab:09:3b:cb:f3:b7:c1:f1:6b:0b:e7:64:
7d:37:a8:4f:b7:c0:bb:71:f8:78:3d:2c:03:4d:ee:8b:2c:97:
82:98:f7:e2:07:f1:53:63:59:18:0c:56:44:55:be:77:19:b1:
3e:84:ed:55:16:9f:d0:84:78:51:73:d8:dc:97:50:4a:d4:dd:
32:c0:37:0d:2a:bc:5c:67:0b:24:85:1d:82:57:30:c6:02:19:
0c:88:13:e6:28:42:6d:08:e7:20:62:2e:21:2b:50:b1:08:2e:
21:3d:5a:b2:1f:1a:47:cc:05:68:5c:9a:e1:94:a2:de:80:41:
50:24:7b:56:6a:83:91:b9:f2:1d:27:aa:1e:a0:03:3f:5f:4a:
31:89:b5:10:3f:73:55:70:8d:dc:a3:4f:03:1c:32:0f:28:fe:
32:1a:58:08:f5:92:b8:cb:05:be:54:00:75:1d:17:cc:87:c0:
23:a8:59:32:14:b2:31:06:14:74:01:55:87:25:07:30:bd:04:
5a:01:bf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:43:15 2024 by rpki-client on console-ams.rpki-client.org