Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
File: m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer (raw, json)
Hash identifier: QFWI2rsKup6qZuKLGGIFidfixTBaBH6IA5EFfm979mY=
Subject key identifier: 9B:EA:3A:3A:4A:36:06:C7:39:6F:15:F5:01:AC:5C:64:17:85:75:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC48E4EAA947888796BC584148F0BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197524
IP: 5.22.240.0/21
IP: 88.133.0.0 -- 88.133.143.255
IP: 88.133.156.0/22
IP: 109.199.160.0/19
IP: 185.9.64.0/22
IP: 2a01:a980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:48:e4:ea:a9:47:88:87:96:bc:58:41:48:f0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bea3a3a4a3606c7396f15f501ac5c641785750c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:96:e2:68:46:28:23:21:35:1d:54:db:a7:46:
eb:ad:4b:4e:66:5f:3d:14:78:a1:34:fa:64:c8:48:
9f:5d:2d:5e:17:b1:e4:48:0f:1f:3a:ad:9e:c7:00:
0a:e1:5b:38:06:ac:06:e4:4c:22:d9:b0:9c:b1:10:
72:2a:c6:c9:df:2a:a9:9a:25:91:c4:76:18:af:75:
3e:3b:1b:65:78:08:36:17:5d:6b:7a:59:7d:40:3d:
70:aa:cd:ce:28:0d:70:a8:a4:58:4c:b8:29:57:d8:
e3:6a:68:68:42:31:2a:b6:4e:40:b9:5e:a9:47:de:
ff:6a:4a:2d:fd:bd:d9:70:e1:fc:db:34:a4:29:20:
0b:59:05:44:ac:8e:7d:1f:6d:40:31:29:38:ef:99:
12:f2:80:6d:e5:e0:f5:d8:2f:57:4c:1e:14:0d:fc:
5f:66:c1:af:38:ac:44:52:1a:56:9a:49:9f:4d:91:
5f:6d:17:c7:35:21:0e:6c:bd:c1:4d:3d:3e:b9:81:
78:92:08:2b:9d:db:23:04:89:74:f3:d0:7d:1d:db:
8e:65:13:00:c5:3c:a4:72:ad:0d:44:48:30:11:b5:
ba:1c:51:c4:3b:f8:7d:97:27:5c:e5:0e:27:c9:39:
2d:40:f6:17:25:41:44:63:f0:0f:64:23:ae:59:4f:
ab:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EA:3A:3A:4A:36:06:C7:39:6F:15:F5:01:AC:5C:64:17:85:75:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.240.0/21
88.133.0.0-88.133.143.255
88.133.156.0/22
109.199.160.0/19
185.9.64.0/22
IPv6:
2a01:a980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197524
Signature Algorithm: sha256WithRSAEncryption
90:a9:cc:6e:79:97:19:b9:f2:70:51:53:a2:a5:e1:ba:c0:09:
2a:a9:81:1c:a9:36:8e:1c:33:f2:dd:0b:8a:00:b9:71:13:cf:
4f:43:a9:cf:e1:c5:98:00:c7:69:56:ce:6a:b9:42:a1:ed:b3:
2b:6d:5f:c7:c6:89:19:da:d1:b2:0e:7f:71:71:6e:1d:64:5f:
da:ce:dd:55:03:dd:86:69:91:a8:54:82:6b:e1:1e:57:b3:3e:
dd:bd:3e:75:8d:d9:77:d6:ad:80:5d:a2:d2:cb:b3:63:31:d2:
ba:15:d6:64:17:78:18:ea:62:7e:c1:2c:bc:95:89:da:d0:b5:
8b:8d:22:7c:27:01:6c:30:ce:ff:de:3d:cd:9b:e1:c6:ed:46:
3d:8b:a5:a9:f0:a1:ad:5c:cc:ee:4f:d4:1d:40:67:a4:16:6e:
59:5c:0d:5d:35:e1:83:e0:aa:ae:17:ad:8c:e8:bd:3b:e1:78:
11:d5:ba:e1:08:f9:fc:5c:01:92:ab:ab:4f:6f:9e:2e:b6:b7:
ee:9e:1e:98:fe:91:42:40:f5:de:02:a1:03:bd:e7:f9:ba:06:
df:59:7d:95:a5:88:2a:4b:42:34:fa:16:0b:77:e9:f7:23:f6:
58:f6:a4:0a:36:f9:13:34:e0:bb:7a:20:eb:90:11:7e:94:eb:
13:04:ee:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:58:28 2024 by rpki-client on console-fra.rpki-client.org