Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
File: Og6YCIquzFusI9Wg5intsMVT5y4.cer (raw, json)
Hash identifier: OX8+Bo4u3k2WL9CximpyCxAUPV3jegIMwFUt6svkhIk=
Subject key identifier: 3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94BF1CD5E07386FBC8A016737336704
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:30:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212310
IP: 185.237.192.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:f1:cd:5e:07:38:6f:bc:8a:01:67:37:33:67:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:b0:e7:b1:e9:82:66:6b:38:34:10:a8:da:
f7:95:3a:16:ac:e9:c4:b4:e3:ab:52:d7:4f:e1:03:
86:a8:e3:f1:2b:a3:e4:06:7a:1e:ec:9c:be:3c:0f:
04:55:a1:12:ec:d8:14:2c:09:b9:cf:3f:06:41:ac:
03:a4:ab:3b:db:f3:79:a2:5d:73:04:29:71:bd:12:
2b:06:4e:1c:e9:8e:8d:37:10:fd:50:ae:38:5c:69:
66:8b:30:35:fb:71:ff:f6:93:d4:f3:76:ca:45:b9:
da:97:c2:87:f3:cb:8b:0c:06:85:ce:a7:9d:fb:e2:
81:9a:7a:f5:4b:c6:f5:bf:1f:5d:31:62:4e:3c:09:
fe:68:6a:70:80:51:50:b6:fa:a4:b1:3a:bd:48:28:
d6:27:46:bb:87:5a:ea:6b:3a:ce:55:ad:e6:1b:10:
b7:b7:13:07:10:1c:85:f3:3b:41:9a:f7:1d:5e:8a:
3b:de:f1:95:4f:29:3f:72:5e:f1:f6:5d:48:0e:f9:
a7:32:26:1d:df:90:bb:e3:90:12:c8:4e:c2:6f:97:
4b:79:39:25:c4:8a:33:65:af:d4:da:cb:60:18:c5:
48:84:c8:dd:a2:db:f3:9d:b0:e2:0f:91:07:3e:07:
8d:8f:80:25:4c:73:76:f5:1a:e6:43:45:b2:0e:fb:
e7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.192.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212310
Signature Algorithm: sha256WithRSAEncryption
99:85:8e:5e:45:27:83:1d:05:d2:c4:0f:47:49:11:db:aa:a7:
99:76:5f:f8:f8:ea:1b:10:39:21:a3:10:79:1e:ae:21:f2:81:
87:f7:58:64:84:eb:28:6b:14:e2:39:b3:37:ba:7b:48:d4:8e:
d5:e7:0b:38:09:4f:43:dc:fb:bb:01:15:1e:ff:dd:1b:2a:d7:
49:24:7e:ab:4b:77:b3:30:b3:c6:8c:26:a0:6b:6d:6c:f5:3c:
ed:f9:9d:77:90:33:48:46:99:3c:ed:4b:f1:e8:2f:ba:91:18:
15:7d:94:79:03:76:b4:6d:c6:aa:9c:90:71:f2:d6:2d:2c:02:
54:6f:2d:90:85:e5:59:4c:d7:89:94:f1:3b:a3:81:43:97:d4:
b8:25:cb:55:96:72:54:c0:9e:6d:fb:a9:15:58:6e:a0:14:34:
e0:4d:66:8c:b0:79:bd:61:1d:cb:7a:9f:57:c2:86:00:64:34:
e1:31:fa:60:a8:d5:4d:10:8e:00:de:75:33:17:f6:31:37:8d:
7e:2e:c6:3f:6a:c4:00:1c:a7:1c:cd:db:09:fa:c4:bc:b0:2b:
cb:3c:43:91:39:5e:25:44:e0:21:be:c2:1c:23:5b:d2:de:57:
dd:e0:d9:fa:2b:de:f9:f0:4c:03:a5:44:16:e2:79:b6:af:36:
7f:42:0b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:56:29 2024 by rpki-client on console-fra.rpki-client.org