Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
File: OkGxVaq20SKf00jqoD0PeQPxJno.cer (raw, json)
Hash identifier: r8Y4LjsgYLnxlMBJolnVt/jCG7b6MUQegXp88zhdZso=
Subject key identifier: 3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500F79C04674C7F270E911E8656B0F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211783
IP: 185.197.136.0/22
IP: 2a0a:7a40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:f7:9c:04:67:4c:7f:27:0e:91:1e:86:56:b0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a41b155aab6d1229fd348eaa03d0f7903f1267a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:a0:19:c9:b3:ba:5f:e9:7b:5a:5c:4f:ef:
1d:86:6f:a6:1f:4d:6d:a6:68:53:0f:3e:01:3b:19:
f5:16:c6:4f:4d:b4:77:c5:6d:3a:86:71:07:f9:46:
31:da:22:ea:c9:63:cb:b1:ab:5d:fd:15:00:be:b5:
4b:96:ec:6b:81:de:58:e3:96:ce:26:f6:ea:75:16:
be:4f:b5:09:76:80:11:16:76:bd:06:c0:5a:f0:69:
2b:9a:e8:bc:63:14:a8:da:4c:90:90:49:42:10:d0:
7c:72:59:48:e9:c4:c6:82:58:73:18:78:36:da:e8:
37:37:71:a5:70:cc:c2:9c:eb:66:a7:9b:cf:a6:39:
2d:c0:47:7a:49:71:61:f6:69:c5:30:a6:7a:d4:dc:
1e:09:50:8c:76:17:5a:3c:39:8b:c3:ca:0f:90:0c:
b5:32:a0:0e:a8:ba:15:c9:1f:94:25:86:63:d2:47:
19:43:84:c0:5d:da:05:c5:59:8d:29:30:c4:ed:7e:
b6:4c:57:94:00:77:ae:28:31:55:46:78:bb:c7:be:
0f:50:98:6f:1d:f1:65:d2:15:aa:c7:6f:b2:9a:44:
9d:85:dc:b5:fa:35:98:cb:0c:a4:8b:90:2e:25:fb:
17:1d:7d:ac:f9:aa:98:ed:78:14:11:a5:7b:e7:f8:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.136.0/22
IPv6:
2a0a:7a40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211783
Signature Algorithm: sha256WithRSAEncryption
67:d7:3c:c4:90:e3:8e:62:d6:7e:85:67:2a:e9:dc:7d:d6:cc:
b4:90:4a:6c:36:24:7e:8a:f5:e9:9b:b7:a9:a3:12:0a:bd:e6:
b9:46:65:59:2a:43:5c:58:46:2f:9a:61:f4:92:1d:ee:be:88:
2a:80:be:0d:1e:c2:76:f3:62:48:92:d3:f6:49:7e:85:a4:aa:
3f:68:d6:80:53:bd:5f:26:12:b0:2a:5a:24:74:ea:b8:0d:87:
12:bb:a6:02:aa:6e:e3:ba:b0:cf:7c:81:f8:50:c0:2c:67:5f:
2b:67:3e:3e:4a:48:42:19:1c:d3:8e:96:77:ee:16:3d:dd:ec:
c6:e9:4d:0f:9d:b2:ef:7f:91:d4:b8:8a:54:57:68:2e:6b:cb:
d3:f2:47:6c:40:db:b5:88:98:9d:5b:f1:70:e9:56:fb:93:fb:
fe:0c:f9:7f:62:4e:c6:75:c3:bf:77:14:7e:0e:6f:36:3c:58:
b7:5b:a1:7b:f8:49:b1:34:14:a8:38:0d:03:20:86:77:67:66:
a0:89:54:c7:fc:dc:79:e9:a2:b8:1f:9f:dc:59:34:c0:c4:1a:
05:9b:f5:ae:47:33:48:b8:10:a3:73:8c:07:45:e2:09:96:e6:
74:8a:fe:01:97:08:c9:c6:1e:57:d2:db:f1:5f:a4:e0:99:b0:
70:e7:11:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:32:08 2024 by rpki-client on console-fra.rpki-client.org