Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
File: o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer (raw, json)
Hash identifier: kHaEQ/ulmb4HiD4WR4FcrStlaqValcWXAjkFHd30iKY=
Subject key identifier: A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50005D173AA88C11E1E913614F2DE01
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201535
IP: 185.71.164.0/22
IP: 2a05:34c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:05:d1:73:aa:88:c1:1e:1e:91:36:14:f2:de:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:43:fc:c1:e2:ec:75:e8:e4:3e:02:e9:20:
0f:6c:f5:82:32:f3:de:a6:94:ae:97:0c:2d:0a:64:
cb:2b:4f:39:12:dd:8c:65:92:ca:14:be:3f:c7:c1:
41:92:47:99:47:c2:33:96:68:33:22:b6:58:c5:28:
b4:5e:53:87:d5:69:9e:d7:99:00:ce:03:2e:36:91:
9b:87:37:f9:8b:b5:8e:cb:73:9e:7b:3f:7c:ad:e2:
a9:3b:82:81:64:5a:a4:cd:56:56:05:17:0e:d7:08:
ac:94:b6:bd:86:71:5a:b0:a9:cd:f9:70:5d:42:41:
79:bb:fb:0c:f0:fb:90:34:5c:70:e0:cf:e5:e4:ee:
b1:e6:05:da:a8:8d:f9:f0:87:19:97:c4:05:ad:62:
a9:f4:30:bc:f7:05:54:90:5a:96:3f:ef:66:f1:02:
db:03:15:ca:79:6b:b6:5c:fc:fe:4b:76:2a:a1:95:
a4:1b:e4:ab:7a:20:e0:a4:92:bd:42:6e:e1:93:46:
10:02:c4:02:05:7d:80:b7:d6:45:54:4f:43:cb:61:
0a:44:45:78:72:9f:fb:c4:d6:2f:d8:ab:2e:78:b7:
41:76:64:33:d0:18:55:c0:77:de:e5:9f:72:a9:f6:
9a:6b:ee:ba:e5:74:7c:54:4a:84:e5:ae:38:c8:b2:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.164.0/22
IPv6:
2a05:34c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201535
Signature Algorithm: sha256WithRSAEncryption
79:74:ca:1f:85:8f:7d:f7:2a:e7:e9:e4:61:d2:22:1b:cd:68:
05:07:c1:26:10:4b:5e:e1:4d:89:77:51:c3:fc:70:d8:ee:ba:
38:b4:a3:cb:b2:cc:54:cf:a6:96:8b:f9:7e:28:0b:23:e1:f0:
39:d7:e7:4a:5c:eb:0c:af:76:f2:df:d1:ac:04:70:18:2d:5e:
af:95:7b:88:61:ea:fc:30:9a:35:3b:a7:b5:52:0c:24:26:93:
24:29:13:5c:6e:2a:08:76:c9:e4:ce:2a:8c:4d:c6:08:02:51:
6f:80:a5:5e:ca:f2:2a:18:1e:b7:d4:b4:89:8f:c7:bf:db:28:
8e:ee:d0:50:ae:25:1f:55:a3:db:0b:d8:e4:9b:36:dd:f1:a7:
b8:0b:38:69:f0:63:52:d0:89:1a:16:dd:44:8a:e4:e1:52:42:
a4:f2:89:58:60:e1:98:ae:db:00:12:21:47:ce:3f:e3:94:79:
9b:99:83:93:8f:50:c2:96:7f:82:be:d4:ef:76:74:b5:88:31:
42:da:86:8a:78:e2:01:1b:38:72:87:79:d2:51:a2:6c:ec:b5:
63:fe:e8:f1:bc:e5:f2:06:7f:52:1a:a9:3f:98:b5:38:25:ef:
b8:68:0d:f6:75:16:ae:8f:38:23:96:61:1d:b8:eb:07:b3:4f:
bd:57:8f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:58:11 2024 by rpki-client on console-fra.rpki-client.org