Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
File: o8igyniYQoP6uYbJuApbBAl35VY.cer (raw, json)
Hash identifier: lldeRjmQ5vHYpwHdCyzBXa6lPoENc4YszBmd/8f/79Y=
Subject key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC5D055F1364FC0BD175270263BCC0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51061
IP: 193.110.178.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:5d:05:5f:13:64:fc:0b:d1:75:27:02:63:bc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f2:b8:3d:43:9b:f7:a0:e3:3c:4e:c7:e2:3b:
bf:05:5b:b6:fb:50:6d:31:77:80:7a:49:ba:f6:64:
00:d5:f3:25:46:ad:93:7b:e0:ff:6c:b2:39:8e:9a:
e6:29:0b:dd:aa:3a:77:04:92:8a:f2:05:cc:32:db:
e8:ca:c6:40:2e:ae:b6:0a:a7:d9:b5:16:c5:af:90:
0c:d7:d1:63:68:11:a0:fb:e7:e1:6c:cb:3a:f5:3e:
f2:b2:30:47:51:12:d1:4e:f9:ad:31:80:72:31:30:
70:e7:f1:8b:a3:4f:b6:20:ad:a6:21:67:41:d5:5e:
5e:a4:1d:3e:c3:3f:51:51:f0:fe:8f:9e:30:81:41:
8b:6b:ca:bf:ab:84:9e:28:3a:21:89:7c:e1:11:77:
23:43:c7:91:c4:f8:1e:50:0d:be:b7:18:b0:65:48:
31:cf:bc:26:fa:13:6c:56:d4:94:ba:b8:54:20:72:
a7:d9:0d:a8:cf:41:60:06:77:7d:e0:3a:f8:ed:e6:
e7:1f:3a:e5:03:3b:83:e5:f2:d6:f9:f0:66:f6:27:
e8:ad:c0:7a:48:1e:14:63:dd:cb:01:45:eb:48:b4:
7f:e1:fa:e2:68:c6:08:db:b3:24:48:48:5f:6a:ea:
c1:50:a6:6b:e6:df:be:ea:d1:1d:e0:2c:4b:71:f0:
18:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.178.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51061
Signature Algorithm: sha256WithRSAEncryption
3c:18:cc:90:f2:c0:e6:16:a2:b2:52:51:8f:5a:30:fd:b7:95:
91:6d:68:c8:4f:0d:70:d7:cc:b6:12:fe:2e:b0:6f:18:8c:c2:
99:e2:a2:eb:5d:f9:4f:bb:12:74:95:e5:14:8f:fb:f2:cc:0b:
30:98:3d:3a:b8:11:92:e9:a7:1d:db:8c:4d:14:b3:6c:78:04:
63:62:3d:3d:52:db:d0:0b:da:44:70:36:e5:89:21:76:37:30:
e6:98:76:c7:07:70:b4:ab:9c:96:5b:28:d1:99:7f:98:51:ee:
45:24:36:4f:3c:51:ce:d3:16:22:5d:ec:c7:77:41:4e:ff:4e:
23:06:14:a4:d7:e3:b9:55:17:78:1e:57:f6:68:84:fd:4e:00:
c6:2d:ac:19:6b:2e:d6:88:49:f5:53:6f:dc:73:1d:c3:90:f6:
9d:e5:43:cf:c3:79:23:f2:c3:69:88:5c:07:1f:ee:b1:3e:46:
99:28:ec:65:fc:04:6c:ea:bb:c9:cc:66:63:b6:9d:d7:79:dc:
75:ac:fd:f0:50:7d:b4:12:cd:af:dd:c7:57:5e:7c:b0:a3:02:
bc:0d:a0:50:36:79:1e:5d:61:72:4b:57:95:78:5f:13:3e:4c:
71:0b:78:d0:ee:98:cd:f3:7e:3d:4b:27:30:43:4e:86:44:b4:
ed:fd:91:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:29:31 2024 by rpki-client on console-ams.rpki-client.org