Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
File: _otJRFUnf_UwAlzvLVHffquORRA.cer (raw, json)
Hash identifier: qzjn1Jcl8OexIyg/zkBi/qmEddlwLcEVqsX3oxibM1I=
Subject key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF78B790D74CD3FB83C2FECAB526F7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50274
IP: 109.127.0.0/18
IP: 185.112.192.0/22
IP: 2a03:6160::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:78:b7:90:d7:4c:d3:fb:83:c2:fe:ca:b5:26:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe8b494455277ff530025cef2d51df7eab8e4510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:61:29:1e:a3:e4:73:f8:df:d3:d2:d4:40:
d4:d2:4b:a9:6d:81:91:43:9e:36:38:b3:55:27:c7:
18:27:9d:97:17:a2:ed:fe:a1:05:ec:d2:e3:02:b0:
24:ae:12:a9:fb:61:88:0f:b2:3b:e3:fa:25:91:94:
da:23:8e:80:cd:f5:0a:9a:8e:a1:f6:a5:f3:24:89:
0e:c9:bb:e2:53:8c:be:ae:00:49:1a:0a:53:34:c8:
58:78:99:22:c0:99:bc:ee:82:a7:18:0a:83:ee:8f:
e8:3a:69:b9:90:38:d2:4f:45:2a:fd:93:1e:41:c9:
c4:19:65:c1:37:90:20:25:3b:34:59:d4:b2:80:4d:
51:03:64:53:17:03:a5:e7:7a:e8:0f:8b:81:d0:ce:
9a:f0:12:c9:58:1b:38:01:cc:7e:95:62:a7:0e:75:
88:30:26:b7:15:0f:f8:b5:c1:be:69:5c:bb:ac:a9:
09:87:12:2a:fa:de:e1:a6:3c:dc:b9:ca:61:8f:17:
47:2e:68:4d:68:f7:83:7a:8b:4b:18:8f:7f:a2:0f:
ae:7d:bc:0e:2a:c7:e5:e7:40:a5:fe:d0:c0:2f:d8:
c5:4f:c4:59:0a:d3:4a:03:76:52:bd:d3:8f:1d:0c:
66:31:ec:5a:c9:b4:fb:5a:0b:fe:6b:ae:4b:65:16:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.127.0.0/18
185.112.192.0/22
IPv6:
2a03:6160::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50274
Signature Algorithm: sha256WithRSAEncryption
22:07:38:4c:9d:56:49:e2:9d:14:1d:7a:4a:79:69:ea:e9:46:
df:e6:0a:77:02:cc:41:94:f1:d5:82:06:a3:b0:5c:b1:24:d4:
4d:99:fc:47:13:d6:1e:8a:0d:d5:c9:1f:5b:b7:bd:c6:02:16:
0f:0c:2a:bd:e7:b7:2d:b4:44:b8:75:47:8b:17:7e:b1:04:1b:
a1:6c:f6:a5:b0:59:e3:d4:7c:85:15:68:87:24:1b:de:e4:db:
77:a4:b5:7f:50:7e:f8:4e:8f:49:92:57:88:f6:c8:bd:07:e6:
3e:32:30:0c:81:0d:6f:6c:b5:dd:cc:61:d7:6a:cb:fc:f0:05:
16:4c:f8:35:9f:83:ff:31:e0:16:b5:b2:d6:e2:3b:60:00:e2:
75:09:2e:df:60:bc:5f:2d:b9:21:46:ff:02:cb:94:25:92:94:
13:f5:71:b7:ee:ba:5d:08:3a:59:7b:a9:93:07:1a:e5:7a:9c:
6a:29:9a:0b:9b:27:c4:41:94:d4:50:d7:3a:1b:e5:e1:b6:43:
ab:42:34:47:e6:45:d2:b3:c1:ff:16:86:a5:65:ab:40:a0:05:
23:06:93:23:e9:11:cb:b3:3e:17:a6:fc:da:05:7d:ba:2c:9b:
20:e4:65:f7:94:54:c8:2b:1c:f1:f5:4a:8c:fb:69:79:4c:17:
a8:d7:2a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:50:17 2024 by rpki-client on console-ams.rpki-client.org