Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.cer
File: o8Cz7okOfexbJJ6mJb7Vm5EDLAI.cer (raw, json)
Hash identifier: Jqiqic0Bbs90ZE6RjEB+D2oN8AyRrrF64mc7hKJm1ZQ=
Subject key identifier: A3:C0:B3:EE:89:0E:7D:EC:5B:24:9E:A6:25:BE:D5:9B:91:03:2C:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DADBEAFE29BAF7D6AE6CDE28670DFA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60850
IP: 185.0.26.0/24
IP: 2001:7f8:146::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:db:ea:fe:29:ba:f7:d6:ae:6c:de:28:67:0d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3c0b3ee890e7dec5b249ea625bed59b91032c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9e:79:82:7e:b1:df:65:cd:c6:a9:f3:ad:e4:
5e:d2:97:1d:c4:71:ee:c4:85:8a:43:f2:59:9d:ad:
fd:df:f5:8d:dc:b0:a2:aa:35:1c:86:24:44:13:52:
21:13:da:3e:79:e4:86:51:98:a2:6a:75:3f:dd:a0:
7d:d5:97:0c:4c:75:bc:f2:04:71:a8:f1:14:b7:eb:
e0:e2:03:42:88:7c:30:81:6c:1f:eb:db:35:3d:41:
cb:e6:51:c8:5a:1d:5a:6d:57:fb:fd:2c:6e:08:3f:
8c:01:83:08:e5:5b:6b:83:4d:bf:51:39:f8:16:a2:
ce:45:5f:e6:40:4a:96:9b:93:82:16:5e:9a:8e:b6:
6f:78:9b:d2:d3:5f:52:66:45:cf:ed:c7:45:86:2a:
57:5d:b4:cf:a9:14:c0:13:a3:0d:a2:37:33:31:4b:
f5:c7:92:ee:fa:ac:28:a3:d7:17:58:1e:7d:ac:c9:
2b:a1:1b:e9:9f:e6:54:75:e4:53:41:61:a9:db:a8:
07:67:d7:8a:3d:4a:43:f1:be:23:43:93:21:67:14:
64:83:cc:a4:bb:97:19:95:81:ae:d3:2d:97:86:e1:
39:97:26:b6:27:c3:b6:5f:62:f5:2b:fa:56:15:12:
82:06:86:c2:5f:41:92:dc:22:37:b1:c9:11:53:70:
cb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C0:B3:EE:89:0E:7D:EC:5B:24:9E:A6:25:BE:D5:9B:91:03:2C:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.0.26.0/24
IPv6:
2001:7f8:146::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60850
Signature Algorithm: sha256WithRSAEncryption
72:eb:53:63:fe:e4:7c:2d:58:4b:ef:f4:54:a3:58:b1:f7:93:
14:d4:b1:d7:98:8f:1d:9f:f0:43:b0:8e:2c:2a:85:d7:c8:e9:
ee:e5:2a:ab:b1:85:59:bd:db:05:b6:df:b3:a8:4a:81:ef:2b:
8c:0b:cf:8f:03:31:45:31:ac:10:43:7d:19:31:bd:d5:8c:c7:
5d:6e:16:d1:32:bb:92:de:c0:1f:f2:d3:ca:66:cd:bd:13:19:
89:11:59:2c:72:bf:92:0e:5a:99:08:4a:6e:ee:dc:51:8f:9b:
e1:7d:64:e2:8a:00:56:c4:3b:5d:43:26:8b:09:d1:73:e5:32:
31:93:ee:50:80:d8:ee:ea:c3:74:ae:0c:27:ea:5a:5d:da:bf:
6f:c4:4a:c8:d0:65:31:bd:ef:34:f2:2a:0d:b4:32:e0:d0:51:
29:39:f0:90:76:34:2b:c4:f4:4c:6d:f1:f5:8d:a1:8c:8d:67:
d8:58:1c:f2:3e:e2:58:e5:0f:d3:6b:5c:8a:f3:68:5f:1b:4f:
53:23:3c:35:40:24:99:19:d6:9d:aa:ba:ec:79:50:59:76:01:
cb:d9:6f:8c:f1:ad:a7:ed:aa:52:e1:0c:99:b5:89:f8:e5:ba:
9e:ce:4d:f8:2f:f7:45:b2:df:74:b0:41:be:05:9d:4f:26:25:
7a:87:06:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:13:59 2024 by rpki-client on console-ams.rpki-client.org