Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Oe1LBj43c7gi3hbptzI-sZXNcGI.cer
File: Oe1LBj43c7gi3hbptzI-sZXNcGI.cer (raw, json)
Hash identifier: CISPv/QYnNDf9m9AvpD12A1JGFf+fvcJ0r83jQ//WLc=
Subject key identifier: 39:ED:4B:06:3E:37:73:B8:22:DE:16:E9:B7:32:3E:B1:95:CD:70:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B7643826E8E98B0AACEDDB10E241E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/f568cf-d3ac-4e99-aeac-010c781ecd77/1/Oe1LBj43c7gi3hbptzI-sZXNcGI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/f568cf-d3ac-4e99-aeac-010c781ecd77/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212582
IP: 185.228.59.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:76:43:82:6e:8e:98:b0:aa:ce:dd:b1:0e:24:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39ed4b063e3773b822de16e9b7323eb195cd7062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f7:c7:aa:9d:05:b6:af:d3:a0:00:1c:9e:d6:
1e:73:9e:4b:7a:d1:20:c4:46:fc:88:d6:bf:c1:4f:
39:a9:55:07:30:32:09:9a:78:f1:af:4b:73:0b:6b:
05:43:eb:b2:0c:bd:2e:88:98:b9:b8:1f:1f:05:cd:
e3:8d:4d:06:66:57:51:a1:d7:14:75:65:12:a8:4d:
81:53:a2:ca:52:1a:aa:ff:42:4c:70:e8:d3:0f:ce:
71:ce:2a:45:3f:70:d7:3b:a2:3f:0e:6f:30:37:91:
d6:39:8b:4a:8b:dc:42:2a:a2:0a:35:d0:27:61:bc:
45:08:f5:0e:9c:f2:b4:00:57:53:5a:fb:62:f2:c7:
1e:0d:4d:2b:a4:fa:f7:f2:81:c7:17:56:01:2a:21:
6d:c3:cf:97:64:51:df:c8:22:12:59:85:5d:7e:cd:
95:28:36:ba:e6:76:72:f7:29:41:1a:b1:b3:1d:eb:
7c:02:ec:48:80:83:86:45:8f:e0:b6:7a:6f:f7:bc:
df:7d:ea:00:a1:a4:66:b8:4d:69:8e:22:4d:db:ae:
45:2e:69:04:c5:21:9b:18:0e:8c:0c:84:b3:0f:fa:
52:5a:be:d6:17:dc:c4:db:55:de:c0:55:73:2d:cf:
9f:ac:05:7e:b6:60:39:96:87:d8:76:a1:28:47:95:
3b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:ED:4B:06:3E:37:73:B8:22:DE:16:E9:B7:32:3E:B1:95:CD:70:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f568cf-d3ac-4e99-aeac-010c781ecd77/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f568cf-d3ac-4e99-aeac-010c781ecd77/1/Oe1LBj43c7gi3hbptzI-sZXNcGI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.59.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212582
Signature Algorithm: sha256WithRSAEncryption
3b:d6:5a:35:aa:eb:53:66:48:17:82:90:c3:40:90:d6:22:ef:
d3:ba:df:e9:79:72:b6:51:90:5b:b4:ce:f8:2d:99:16:f3:c8:
08:05:2f:04:f3:de:a4:40:28:d2:47:49:85:f0:f2:1b:b0:86:
26:31:af:6e:9f:a8:3c:9a:70:3d:c7:10:38:c2:44:5c:d8:13:
da:e7:13:dd:5f:2b:14:63:59:97:97:4d:94:11:ec:cb:79:24:
39:27:cf:4c:04:ff:5d:b6:e2:92:a6:35:ff:90:08:3c:e5:d4:
9b:30:1f:b3:64:5a:38:6b:a0:64:0a:fb:47:7a:2b:c5:ce:78:
dc:ec:2c:5b:29:da:9f:c4:cc:46:9c:f4:05:17:7b:b3:cb:70:
c7:15:15:68:ca:db:b4:60:15:28:94:fd:19:70:e2:b0:5c:c8:
24:fa:37:42:f3:89:cb:7b:e1:d4:4d:57:55:17:ec:eb:40:f0:
19:af:52:82:f2:6e:27:52:78:b1:5b:49:f3:0d:0b:37:40:4c:
b3:94:af:ba:f3:f7:b8:8d:20:7f:3c:df:ed:b3:66:81:e1:09:
88:b7:49:2e:6d:2e:3b:eb:c0:5f:df:8c:54:77:dc:b3:65:82:
f2:91:7c:98:e3:1d:75:eb:eb:19:56:d0:cf:f5:97:5c:e7:30:
2b:03:e7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:30:55 2024 by rpki-client on console-ams.rpki-client.org