Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.cer (raw, json)
Hash identifier: S+oAt5nRDEQ7bW14vaNjieXy/kKEAmcdIjsysYSdLxE=
Subject key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D56410FF80A810C8C57CE6EB84AB6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212707
IP: 193.163.47.0/24
IP: 2a10:5bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:56:41:0f:f8:0a:81:0c:8c:57:ce:6e:b8:4a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f3:d3:b0:31:34:d4:0f:b7:48:ee:a1:9c:ab:
db:12:b9:13:0b:93:76:e3:e2:7d:70:1f:04:8b:89:
7a:c2:a5:84:9a:ff:1b:10:bb:fc:cc:6b:1d:5b:54:
15:8d:ec:6a:a5:e7:52:4b:ed:48:72:ca:b1:7c:7f:
9b:cc:ff:cf:1c:b8:72:1b:97:cf:0b:78:5e:2c:4f:
84:17:7f:ce:be:cf:c2:d1:91:3f:b7:26:47:4a:50:
b5:46:cc:2c:1f:95:60:dd:77:97:7b:d7:90:81:08:
98:93:1a:e2:92:cf:57:8e:2e:03:2e:85:9e:01:c1:
3b:eb:00:02:9c:91:b2:85:6d:f0:b3:69:65:fe:6e:
91:4e:d3:79:b0:d2:c4:c8:90:81:e3:cb:6a:7b:96:
ba:15:e5:db:70:30:08:be:de:91:0d:80:c9:8a:be:
1f:ca:b9:55:7c:a5:56:c7:fa:e5:8e:07:40:2c:fc:
0b:49:a2:1c:17:46:d8:48:1b:8a:65:bc:08:73:95:
2b:9f:8b:f7:f4:08:7d:ae:5b:07:26:54:ac:38:55:
8d:d3:b2:b0:30:18:06:ca:57:e2:4c:41:30:4a:52:
49:15:ee:14:22:9b:2c:30:39:6c:3a:7a:b3:82:1c:
af:76:f6:bc:47:fb:9b:a0:d1:87:82:f6:3e:a5:95:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.47.0/24
IPv6:
2a10:5bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212707
Signature Algorithm: sha256WithRSAEncryption
1d:07:82:a5:5e:2d:df:59:fc:e0:c1:8b:b4:41:7b:96:fb:5c:
99:43:df:8b:32:29:92:23:77:f5:04:0b:00:9e:44:2c:51:ea:
cd:9e:b1:68:6f:ed:37:7f:f6:f6:71:24:90:1b:7c:30:b4:ad:
4c:b1:c5:0c:4b:e9:ea:69:25:da:a9:09:b1:af:69:b3:50:99:
b3:96:c1:fd:77:e3:7c:59:61:45:35:e9:ee:60:28:ef:f3:0a:
e9:f2:fd:04:89:6f:4d:4d:fd:a7:fc:fd:f4:2d:46:1c:10:6f:
eb:9f:34:50:0c:13:53:ab:f9:33:f3:09:58:16:15:e7:e3:f1:
1a:9d:5b:96:f7:6c:0b:a6:bb:69:86:6b:95:22:04:64:0d:20:
b2:e2:ee:7f:4e:aa:93:77:d0:b0:59:63:df:26:a3:6d:03:f6:
a9:45:9c:76:7a:5a:b4:7d:31:1b:4c:d9:26:18:f2:d0:3f:0c:
aa:12:5e:28:39:11:d0:d0:e0:a0:0a:55:f3:80:6b:40:e0:06:
3b:ca:a0:8e:6a:a7:42:c7:1a:40:9a:98:e7:d4:78:5f:9a:df:
65:d7:84:76:0f:cb:b7:e0:7f:91:ce:15:82:5f:34:08:23:05:
8a:02:4c:bf:60:a8:c5:ab:7d:8e:8d:5a:c5:b7:0c:8e:e0:8d:
be:6f:05:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:03:56 2024 by rpki-client on console-ams.rpki-client.org