Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
File: OtyOotHlv55F8F2VQFb4yQR6NgU.cer (raw, json)
Hash identifier: OxVwmlvXNmF+V6FedU8BZ0Hd1lvQyrpiAldGzeSKRSk=
Subject key identifier: 3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B809B710E066B45FAA65B1E423B7EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203998
IP: 185.32.48.0/22
IP: 2a04:4f00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:09:b7:10:e0:66:b4:5f:aa:65:b1:e4:23:b7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:2c:8e:1c:2b:50:7f:88:38:79:1c:c6:85:
34:f5:27:e1:fe:b5:1f:10:2f:ee:25:82:8b:3d:a8:
79:14:c5:36:6c:8e:40:aa:3a:02:92:d2:a4:15:8b:
21:24:92:29:ec:b7:49:9f:d2:7b:bc:3e:88:0f:a0:
30:ce:67:94:0b:ef:28:db:9a:07:da:4c:4a:71:7f:
1f:62:84:90:0e:0b:14:63:02:e6:23:df:29:76:e5:
54:48:b3:b6:55:df:6c:3e:f6:9e:e5:64:7e:27:85:
e0:4f:ed:c4:07:01:78:da:52:ef:d9:ef:b6:c0:21:
7a:e8:d6:2f:f1:80:bc:b9:4b:e8:6a:a3:a6:fb:a5:
e3:b9:5d:be:5c:27:a3:00:04:0c:5b:57:96:d1:3e:
5d:8e:f0:fe:98:56:0c:07:18:a8:d4:e2:f7:46:1c:
b6:e2:a7:71:9d:c1:7c:87:bd:89:12:e3:9e:d7:a2:
b6:0f:3d:ca:f5:6e:91:72:35:e3:19:2e:d9:99:f1:
35:d0:80:4c:4a:24:c5:f3:11:a1:8c:58:43:92:d9:
61:79:82:1c:0e:59:cb:a2:0c:32:b9:cf:12:a4:a4:
3f:a9:4f:30:ed:16:4f:11:c2:a7:4a:b0:42:79:8d:
fc:a5:78:a5:19:91:32:37:84:64:82:4d:90:6f:63:
b1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.48.0/22
IPv6:
2a04:4f00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203998
Signature Algorithm: sha256WithRSAEncryption
b1:1b:2e:9a:cb:4f:44:ef:60:93:77:28:6e:02:b4:40:c4:8b:
be:f1:02:04:a7:d7:d0:06:45:2b:f6:e0:d7:a1:42:ec:55:59:
e4:8c:2c:28:99:6f:80:2b:ee:55:af:a5:16:e3:30:26:ab:9a:
b0:e6:02:ed:af:6d:60:76:f8:8d:e0:19:cf:a6:63:7d:b7:74:
41:0b:85:a2:64:7a:02:71:c8:0b:3f:d1:5f:74:4e:14:2a:6b:
fe:ea:b4:c2:c5:c3:58:c0:e8:ae:fa:b1:12:48:1d:de:a3:3c:
71:b4:84:56:07:82:e8:e3:70:d0:51:9e:73:47:17:1b:9e:5c:
89:f1:0a:0a:e0:78:20:3b:4c:6b:b9:a1:b9:44:4b:6e:a0:fe:
c0:d5:f2:2d:12:80:ec:cc:f9:bc:8e:3b:06:6e:c3:b4:d6:71:
a6:d6:be:77:77:cb:35:5e:9d:f2:4e:33:d2:e2:76:e3:31:e1:
ff:92:30:1c:27:c2:53:ba:a1:b5:44:f1:a4:43:2c:8b:40:62:
7a:fa:e1:63:70:5b:77:9d:60:08:8e:90:a9:a6:02:c9:ea:88:
c4:4c:ab:25:76:50:1a:73:ba:34:7f:b1:10:80:b0:d5:d8:03:
51:7c:94:6a:38:c4:00:57:75:2a:c0:20:07:b9:70:63:c9:4f:
23:66:ad:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:32:18 2024 by rpki-client on console-fra.rpki-client.org