Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
File: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer (raw, json)
Hash identifier: vK4UACoJSCXbsXeE3nGOa1Xj1kh7wGHy3vl6IrF9q6A=
Subject key identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BBD092F7919AF9936BEDB4FE700BB6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207975
IP: 194.32.166.0/23
IP: 194.32.204.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:d0:92:f7:91:9a:f9:93:6b:ed:b4:fe:70:0b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:82:7f:03:b7:b9:94:e4:06:9e:03:16:5a:
08:c3:80:30:cd:bb:46:4e:65:c9:16:09:1a:16:31:
fd:c0:7b:e9:3b:28:b0:61:5d:d6:d5:e2:76:ce:c3:
51:24:de:8e:4b:90:00:86:af:51:55:b3:4f:29:f1:
f5:94:94:cd:d4:5f:ca:b8:ee:b0:76:eb:ff:c1:eb:
02:01:2c:26:0a:8d:43:cf:00:68:2d:86:65:75:d5:
14:26:80:ea:a6:0b:74:85:8e:f8:4a:77:39:cb:d2:
4b:5b:bc:83:23:5b:21:44:d3:5a:76:5e:97:8a:44:
d4:84:c8:10:fd:40:b2:bc:6c:88:e4:b8:df:e2:63:
57:11:86:67:b8:41:29:1b:73:1a:b6:49:41:0f:94:
8a:21:4e:4a:3c:2a:ea:b3:62:c5:db:b1:3c:e4:87:
c6:8e:64:33:e3:92:61:23:e9:a0:6c:7b:34:9c:bf:
33:dc:c5:58:70:f7:5d:15:f3:e8:39:60:24:0f:20:
d0:1e:98:09:00:9d:6b:08:74:f7:c2:ef:a4:0e:af:
c6:91:8c:57:00:98:ad:75:21:c5:a4:69:2a:6f:3c:
27:4a:e4:b2:72:4a:82:b9:3b:7b:2a:3e:b9:ff:bb:
d9:4a:c7:f3:2e:63:b1:d0:57:7c:41:51:81:ec:a3:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.166.0/23
194.32.204.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207975
Signature Algorithm: sha256WithRSAEncryption
99:45:2b:a5:06:0e:7b:63:c0:65:93:cc:2d:ba:0f:b6:a9:11:
7c:ba:fe:b7:fc:6c:c6:b2:7c:2e:6c:b3:1f:3e:52:34:17:55:
37:7d:4c:09:15:84:70:d0:2c:28:d0:be:1a:2d:ed:a7:c9:b1:
e4:c9:b7:82:7a:4d:8a:d7:e9:5a:bd:b3:1b:af:c3:c1:90:36:
aa:94:34:1f:0f:59:63:c0:5d:aa:99:b1:80:59:12:b5:e6:f4:
e5:0f:cb:9b:c7:94:be:47:0e:6d:0e:b4:3a:e0:21:57:9f:2d:
0e:0b:de:94:16:5c:57:a1:10:f2:d7:cf:20:30:e8:93:19:81:
47:fb:48:00:04:df:df:bf:92:60:76:72:7b:70:83:7e:9a:12:
44:73:a7:a9:ae:bc:e5:3c:2e:58:48:72:76:89:64:ae:bf:17:
a0:6f:9d:db:19:9c:67:46:e9:a3:7f:e1:26:e7:8d:ba:dd:0e:
f2:cb:ec:5e:21:99:47:31:00:2f:9d:d7:ea:e0:be:b8:df:88:
78:72:a6:c7:7a:e5:63:0b:b4:20:a6:8e:65:60:2c:ff:cb:1e:
d8:98:20:cf:f6:02:43:4e:14:89:34:e7:11:4a:21:ed:f2:6c:
d4:af:ca:a7:5c:3a:b4:4b:7d:85:25:6a:eb:04:82:53:ae:54:
83:1b:96:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 3 09:12:20 2024 by rpki-client on console-ams.rpki-client.org