Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
File: o2dNWISlCoTgfb32eY3cu5zCAy4.cer (raw, json)
Hash identifier: IScmJzl7UjhF/L9uBl9N+XAKa7nKE3bT5oTTuudZhBc=
Subject key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B92B8FD43E06F1AAC2F2AEC3EA4DB5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42632
AS: 199251
IP: 77.220.160.0/19
IP: 83.222.96.0/19
IP: 146.255.192.0/19
IP: 176.58.32.0/19
IP: 185.190.188.0/22
IP: 212.76.128.0/19
IP: 212.124.96.0/19
IP: 2a02:878::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:2b:8f:d4:3e:06:f1:aa:c2:f2:ae:c3:ea:4d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a4:fa:22:d7:1b:67:4e:90:b7:96:c0:1f:cf:
b5:06:da:dc:4c:d0:37:16:38:9b:08:d4:29:27:f1:
c2:e2:33:77:37:d6:e9:78:0e:78:5f:f7:12:7e:f1:
43:30:8b:ca:ab:c5:99:57:aa:f7:fd:ae:6d:b3:96:
ea:52:7a:67:9c:06:c8:31:83:4b:2e:39:de:bd:ee:
ec:c9:0f:fa:51:65:90:e9:3d:36:2e:83:88:81:dd:
e5:84:b1:d1:5b:22:3b:16:12:d3:cb:62:9b:62:61:
4a:f6:a6:fa:ec:8d:49:f6:1d:4c:95:f7:9e:f5:fb:
07:b8:ef:99:c0:00:fe:83:12:63:14:6c:67:5e:76:
32:45:e4:ff:0b:87:ff:63:06:f5:cc:de:ec:4f:cf:
30:99:7b:91:92:c3:d5:5d:fd:8b:b6:21:49:eb:f5:
d3:94:70:3f:ab:69:61:2d:86:be:5f:0a:ed:3b:ff:
ee:e3:68:1f:b2:94:9a:ed:16:1f:e7:a6:69:c0:34:
14:fb:e0:ff:0b:a3:31:44:2c:77:76:3f:94:b5:bd:
56:79:ff:1f:5b:12:a0:aa:82:87:0e:e6:b0:cc:fd:
2c:ea:62:bb:e7:bc:a7:39:c3:40:10:0e:04:eb:6f:
4e:6f:88:62:87:95:20:6c:0d:3c:05:f7:a9:bb:d8:
9e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.220.160.0/19
83.222.96.0/19
146.255.192.0/19
176.58.32.0/19
185.190.188.0/22
212.76.128.0/19
212.124.96.0/19
IPv6:
2a02:878::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42632
199251
Signature Algorithm: sha256WithRSAEncryption
11:3d:71:89:de:6a:21:db:68:3a:14:f1:74:54:4c:54:53:72:
2f:0e:fb:08:36:88:b0:60:62:0d:a5:8f:1b:43:bc:1b:34:86:
bd:be:d6:ed:11:47:df:8a:53:28:9e:22:26:ea:84:db:4e:71:
45:85:22:dc:86:63:24:75:65:1d:2d:a0:63:e4:0a:4e:82:7e:
31:bd:76:e8:6c:fa:5e:01:15:5f:d1:b9:22:51:df:88:4f:06:
00:72:e1:92:c1:cd:1d:01:95:a5:70:df:80:36:ad:ab:7c:a3:
bf:e9:72:12:59:6e:6a:9a:b6:7f:8b:a4:b6:14:e9:77:8e:f4:
ec:18:37:20:e4:4b:d9:18:93:13:88:87:a4:98:18:02:3b:db:
e5:40:25:53:a7:38:6d:72:30:8b:ba:b2:3a:70:16:7e:e3:66:
3f:34:44:39:a9:aa:c5:3b:65:45:b0:5c:ca:b0:a0:28:ed:3b:
6b:60:d4:1d:c3:12:f8:56:04:9a:ab:19:07:ee:d8:4e:da:0f:
90:2b:1c:64:0f:cd:69:6b:65:b1:76:73:14:ca:c3:5c:dc:ad:
3a:3e:f0:68:1e:13:ef:5f:71:e9:55:a0:d7:be:a0:62:43:a0:
10:3d:bd:08:1c:70:1b:8c:50:6e:b7:c9:44:4f:f9:a9:93:9c:
56:cb:a6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:29:26 2024 by rpki-client on console-ams.rpki-client.org