Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
File: OzNj5H5p68XRwiUd3V2sfJiYmSI.cer (raw, json)
Hash identifier: INY9007/pBKNno3CEVwreYZ+lqD8UTL1IUsP3ciZ6Vw=
Subject key identifier: 3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80146D13BC05B49A629EB8DF1430624
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206355
IP: 185.192.136.0/22
IP: 2a0a:2cc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:46:d1:3b:c0:5b:49:a6:29:eb:8d:f1:43:06:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:39:b2:21:0b:2d:a1:84:2e:a6:31:4c:8b:
cf:37:e3:a8:f9:93:1f:a0:ee:3d:94:63:a9:88:d7:
66:60:e0:5f:80:05:04:c8:02:f2:81:5a:a1:64:51:
5c:49:d0:08:0b:cf:ec:64:54:4f:d6:fd:8f:f9:8e:
63:73:cc:0a:a5:15:36:a5:14:84:ea:e3:5b:29:fd:
79:df:bf:9b:d1:24:c6:cd:2a:60:a9:a3:2b:c0:58:
ce:cf:c4:44:92:bc:e9:f4:66:17:24:db:a5:70:ea:
c8:2a:8d:02:ca:b4:46:d2:38:63:fa:3e:b8:6f:90:
ad:2a:51:33:da:ff:22:2e:69:4f:53:21:f8:78:36:
96:dd:42:0c:95:0b:27:6d:90:40:6b:fe:4c:da:c3:
64:0e:ca:d7:c9:aa:b7:a3:aa:6b:53:82:24:5b:03:
7e:28:7d:c6:40:fa:98:2e:23:6d:61:63:c3:42:e1:
82:76:89:0a:ba:0b:2d:b5:06:6c:79:c1:99:80:2c:
c0:7e:0c:5f:98:82:3c:5e:7d:60:e0:dc:f9:ba:91:
04:74:ef:82:f2:f0:29:ad:d1:2c:90:2c:e1:e0:e1:
af:62:78:72:08:00:2c:49:ce:57:d3:f4:84:28:8b:
80:93:e4:30:90:0a:1f:b2:ea:2e:09:70:5c:32:1b:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.136.0/22
IPv6:
2a0a:2cc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206355
Signature Algorithm: sha256WithRSAEncryption
06:d0:ad:5c:98:56:20:7b:75:5c:f8:9d:b3:9b:bc:b1:60:8d:
f3:b6:84:89:16:6d:87:2e:b9:cd:48:6e:6e:d3:2c:98:d8:8e:
a6:37:ab:8f:bc:72:8f:28:9c:e0:f9:16:7f:11:91:82:c4:b5:
2a:fa:ab:b4:9b:d3:63:9d:f6:44:8a:1b:d1:a8:45:c0:b8:c5:
24:f2:e2:d9:b5:82:ca:d6:d8:99:48:66:18:8e:83:4a:d5:41:
c0:09:4d:d6:46:9c:a0:bd:da:9d:b0:1d:e8:d0:a7:d3:e1:e6:
b7:a6:73:4b:5b:56:a9:fc:cb:77:b5:86:c8:f5:34:78:4d:4e:
5d:ec:c6:f5:ac:4e:5f:5f:6a:9a:f9:80:eb:a5:07:0e:d9:ba:
fc:34:49:37:a1:bd:c0:0c:03:09:53:5d:a8:63:80:d4:95:e2:
7c:79:83:57:89:42:61:e1:ca:c5:f0:14:37:78:90:94:9e:a8:
d4:1f:f2:88:6a:83:f5:c8:f4:c1:23:06:c9:cc:8e:50:90:ff:
63:73:2f:fd:43:19:c3:b3:9c:95:3f:82:66:33:5c:a4:60:b0:
5b:2c:8d:b3:e8:df:1b:49:b5:b8:e3:f1:9d:b5:0f:db:38:b7:
8a:53:65:0d:4d:0c:ae:8f:9a:75:98:9e:da:42:5f:9e:7b:1c:
21:25:4d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:32:22 2024 by rpki-client on console-fra.rpki-client.org