Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
File: o95MO22qWmmL8wfMORKCqymH1hc.cer (raw, json)
Hash identifier: I5ZD63sBZNaIWbrT6rjI92DoGydhP1acFgT9iCgcbrg=
Subject key identifier: A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94DD1BF5D164E61827046D25773DD05
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57711
IP: 171.25.248.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:d1:bf:5d:16:4e:61:82:70:46:d2:57:73:dd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:17:54:bd:87:ff:db:9b:3e:89:7b:2a:37:
68:bf:b7:54:f8:2f:d6:38:5a:17:be:2c:b5:eb:09:
7d:08:d2:e9:83:93:d8:84:9d:ea:62:3f:fb:7a:6b:
32:cf:4c:9a:5e:c1:b4:d2:3d:7e:2a:44:6c:f9:1a:
d1:b2:32:ab:cd:6d:e2:e6:84:94:e0:eb:88:fd:01:
39:2b:11:c8:0e:1b:3a:e2:11:0d:a7:77:92:9c:fc:
9f:05:36:92:d7:66:a5:01:ab:22:21:ca:c8:ee:41:
5f:2b:3f:65:4a:b0:7b:98:6c:a1:cd:63:6f:3a:8b:
7b:eb:69:a9:e4:80:a4:9a:b9:3e:5e:87:29:15:0b:
cc:bf:22:57:a3:e3:c6:45:7d:df:f3:d8:c8:6f:0c:
dd:a2:b3:5c:c9:f2:f5:01:58:1a:49:dc:a0:ac:9c:
53:b7:73:5e:63:0d:48:bd:40:d1:a9:99:e9:f0:ad:
2f:0e:b0:ab:ae:7c:5f:35:ae:5d:89:8a:b5:df:1b:
49:32:66:d6:69:2f:91:9e:d0:59:4b:00:21:59:b3:
ef:ae:51:ce:e1:c7:f5:9b:fc:f0:7f:1b:1b:bc:12:
c2:74:12:40:6b:8e:3f:39:57:ca:4d:72:33:09:76:
a7:aa:ab:12:05:c8:5a:69:d2:7b:e1:b9:f4:0f:01:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.248.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57711
Signature Algorithm: sha256WithRSAEncryption
04:4a:1e:25:ac:be:54:ce:c7:71:1f:60:98:bd:d3:4c:33:de:
4d:f7:44:7a:07:a2:62:21:8b:2f:4f:ac:c4:bb:4b:b8:9e:0f:
7c:20:23:1f:4c:b2:19:d2:26:0c:2b:56:2e:f0:21:56:c4:ba:
10:b2:85:84:4a:4d:dd:5f:da:63:25:32:1f:e9:0c:2a:22:4c:
e6:40:aa:f9:eb:80:54:c5:01:b0:4b:0e:f4:8a:4c:d0:f0:d6:
c2:a4:74:92:bb:62:05:bf:72:13:17:c5:10:61:de:4e:5e:95:
59:65:fa:55:21:38:81:93:8b:2d:24:3b:de:7d:a3:cb:3a:fc:
07:c5:a6:95:70:35:17:be:a7:c9:27:37:c7:0a:b3:b6:ef:33:
da:89:2e:35:7e:47:38:93:e6:86:2a:49:9d:18:c3:26:26:c3:
88:59:a9:d2:e6:75:45:d5:66:5a:12:78:8a:0b:aa:e2:b7:f0:
30:b7:bc:98:83:1d:c0:27:26:4f:94:5d:7f:4c:f6:2a:4f:ef:
3e:55:10:7a:09:0f:33:d3:70:e8:c1:85:75:d0:3d:4f:0a:7a:
9c:f3:67:ce:51:4f:83:31:87:f5:83:cc:68:ed:98:e7:f6:20:
11:ea:96:30:45:4c:26:fc:df:cf:06:83:90:f8:35:90:96:fb:
67:18:a6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:03:56 2024 by rpki-client on console-ams.rpki-client.org