Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
File: OndQiZTKTSzBidNfM4KiqKtXuEs.cer (raw, json)
Hash identifier: kCtfOZRIaqqHVAFtoA/JPuoaTyylQMubARTfPcg3bfc=
Subject key identifier: 3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726AEA456024D792B06C6A739748016
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48650
IP: 195.8.40.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:ae:a4:56:02:4d:79:2b:06:c6:a7:39:74:80:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:ce:95:fe:84:42:7f:a7:39:af:05:d9:50:
df:74:ef:78:be:22:c6:5c:70:81:6a:72:24:77:95:
b6:ee:78:df:f2:b1:70:1f:f6:de:c3:72:40:72:d1:
42:bb:a4:3c:af:e2:a9:d4:e8:33:11:6d:ca:0f:c6:
af:7e:bb:03:60:50:00:6d:0d:cf:93:21:dc:10:ea:
07:67:95:6d:91:75:1e:48:f5:5f:0f:a9:6d:7e:27:
01:28:07:ed:32:fc:f8:a6:73:ea:6f:f6:a0:1a:b5:
0e:e2:28:2a:26:87:eb:06:67:0c:1d:5d:66:8e:5c:
ed:de:4e:4b:c8:fa:8c:61:09:9e:36:09:b1:fa:4c:
2a:a1:bb:ff:16:a4:97:da:0e:80:09:7e:6f:80:74:
45:bb:c0:0b:cd:3d:0c:2b:7f:dd:f0:5d:0a:93:aa:
e6:24:30:61:d8:79:71:f9:27:d7:f8:da:ec:2a:a0:
ce:7a:5a:e7:98:f9:81:55:c7:93:a9:db:94:d0:72:
54:02:95:35:36:9a:30:08:fe:28:f0:8a:09:87:56:
f6:ab:0f:e1:31:bb:32:04:20:7e:94:ff:bf:a8:10:
f2:54:33:e0:2e:a9:b0:7b:82:29:21:74:14:91:10:
fa:7d:87:82:40:8c:8f:ba:aa:ad:ef:6a:91:42:c5:
50:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.40.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48650
Signature Algorithm: sha256WithRSAEncryption
9c:3a:96:ee:e9:03:8a:fc:f7:38:8d:3f:b6:19:50:c3:d1:5d:
42:52:61:ec:2b:36:1e:dd:b4:e9:37:ff:6b:a2:8c:2a:40:e7:
99:5c:f4:e8:87:d9:fb:b7:06:99:55:d9:85:aa:16:7f:12:aa:
ca:a8:64:7e:f2:70:8a:df:ef:ad:03:6a:13:67:5a:cd:2f:9f:
94:1b:21:07:3d:52:0e:78:52:c3:21:a0:fe:68:f0:f4:1d:85:
17:ae:6d:17:b0:0a:fc:29:54:a8:1c:7e:c1:8a:af:dc:e3:2b:
30:98:de:dc:29:44:8e:5d:c7:aa:90:dc:ed:22:d7:c5:ee:78:
29:46:b5:88:cb:cd:1c:f8:52:5c:85:91:82:e4:e7:28:bf:34:
3f:ac:b3:e2:09:68:71:84:e6:7c:1d:e1:b7:4f:3b:d7:97:2e:
79:13:71:19:ff:00:11:ca:1f:f7:18:b2:3f:4f:ec:0c:0b:ba:
cc:cf:8e:54:c6:66:94:cd:af:0b:7a:a5:f4:63:c5:c4:2a:b7:
ee:8d:29:b0:dd:68:38:89:b9:e6:8f:db:cb:81:4d:c9:1c:1e:
29:29:1d:a2:85:90:b6:45:3b:f9:74:97:cf:ff:38:0d:de:1d:
57:0f:b0:2b:a4:1a:5f:cd:ee:83:0a:ec:63:f1:72:9b:6c:1c:
c8:1a:37:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:43:25 2024 by rpki-client on console-ams.rpki-client.org