Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
File: o082XngGS1jETUjPs5KR0_sdnhA.cer (raw, json)
Hash identifier: 0lE/MuA5iGvYnh9luXwg41FPSeHTl85+MSpEfMKR+H0=
Subject key identifier: A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B710AB37C5FC64FEE38CBE0A7815FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 20694
IP: 185.166.200.0/22
IP: 188.94.24.0/21
IP: 217.114.64.0/20
IP: 2a01:688::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:10:ab:37:c5:fc:64:fe:e3:8c:be:0a:78:15:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f3:c2:6a:aa:a0:ea:53:08:e6:de:af:06:2e:
c2:75:d3:9c:8b:f9:52:5b:0c:cd:95:06:b0:35:26:
f1:a0:c8:4a:8d:fe:44:0b:b8:d0:60:dd:d8:c1:53:
f5:d4:dc:ef:fd:67:e3:ac:67:b4:1b:bd:60:e2:b4:
fb:eb:9c:c4:46:aa:87:0e:cd:e1:4d:ec:38:7a:8a:
95:ef:96:8e:5c:b1:a6:3f:66:db:55:06:b3:23:cb:
1f:74:0f:be:09:71:ea:f6:3b:a4:1e:f8:b6:69:e2:
b5:ba:90:92:f7:12:91:4e:23:0c:9d:33:ad:ff:0f:
cd:7f:7a:ab:d3:03:83:a3:61:79:43:f8:c5:31:ca:
34:9c:39:f2:76:fb:fc:8b:0f:19:22:4c:93:30:a1:
2c:c0:cb:fc:02:d1:28:7e:ec:81:06:ef:a5:b0:f3:
70:b8:03:b8:0b:df:b0:9b:e9:68:dd:0f:9f:fc:9d:
15:e1:1f:c8:fb:9b:2b:b3:6a:4b:72:05:56:6f:7d:
f4:6e:22:34:de:f9:61:25:98:d5:da:19:5d:ed:ee:
b6:05:65:40:32:a5:63:44:9f:69:35:e3:d5:75:5f:
42:29:c2:fb:27:ea:56:4d:3e:6a:8b:e3:0b:33:45:
60:00:72:57:d8:45:9a:3e:65:e4:95:77:63:a7:21:
49:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.200.0/22
188.94.24.0/21
217.114.64.0/20
IPv6:
2a01:688::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20694
Signature Algorithm: sha256WithRSAEncryption
26:0f:c9:d3:7b:95:92:a6:74:58:54:9b:bf:44:53:d7:e7:46:
d1:a2:8f:ac:fd:6d:e9:bd:f1:67:22:0f:26:8f:ab:6d:c5:2f:
1f:59:5d:2a:9c:f0:23:ed:0b:36:1e:1c:a7:b4:45:36:45:4c:
5f:a7:05:74:56:d5:19:6d:76:d3:a9:38:2c:fc:76:e6:a2:94:
6d:c6:08:4f:4f:cc:a0:0f:2d:a5:f0:f2:09:3f:2b:60:fa:a5:
37:bf:13:35:2f:83:de:5b:25:19:6c:fa:fe:55:1b:f0:75:f4:
04:a1:c3:c6:58:e4:14:d0:94:dc:a7:f3:a9:d1:ee:6e:81:61:
29:39:89:c3:23:6d:b3:ec:08:b7:78:45:25:67:34:61:28:e4:
ea:02:8b:33:b5:73:2a:a2:a3:bc:b4:f5:1b:b4:0d:a9:ea:b3:
31:c2:14:d6:68:a9:85:1f:f7:2f:97:f5:c4:9d:03:89:46:f8:
07:25:59:6c:d4:79:d4:00:99:cd:69:cc:1e:b4:79:cc:18:80:
69:f0:22:8b:38:6e:f2:e6:d1:9a:08:14:e6:71:f2:67:2e:d6:
87:1f:be:68:f3:2c:c2:d4:e4:75:11:fd:f0:df:cd:3a:e4:7f:
67:6c:7b:d7:e8:c9:1d:99:57:8a:df:39:a3:d5:be:5a:3e:46:
e1:33:a5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:13:54 2024 by rpki-client on console-ams.rpki-client.org