Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
File: oGBriq1VPwlIx6iU1oZxhw64LLA.cer (raw, json)
Hash identifier: v1Wpa8fFawlT2QDJgp/vgMu63dRde+rl9RgrzG+t71k=
Subject key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB3628375FF8659A94E40524D8CDDE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 138.102.0.0/16
IP: 147.99.0.0 -- 147.100.255.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:36:28:37:5f:f8:65:9a:94:e4:05:24:d8:cd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:2c:29:ab:18:04:20:aa:b5:4f:f8:6f:ee:
db:17:b7:ba:1a:c1:ae:00:ea:ee:bc:f6:31:d4:4f:
02:5c:93:91:56:28:d7:2c:cd:af:d1:f7:e6:86:e8:
ad:2f:f8:8c:99:9f:39:db:30:13:87:88:12:8e:9d:
c3:a8:aa:66:9f:8d:89:89:b4:85:5a:22:43:ea:c4:
06:2d:2c:32:74:f3:df:36:ae:c8:f2:7d:10:33:df:
e1:d0:c3:30:d3:db:5f:54:cf:ba:3f:c4:e1:d6:91:
f0:13:78:14:de:db:4d:0e:8a:eb:53:1a:60:91:3f:
6b:ab:3c:c8:22:06:28:ac:91:c6:3f:c1:14:2c:d2:
35:13:23:8a:28:2e:cb:05:ca:61:b9:07:2b:cd:b1:
20:b5:da:c9:be:d1:74:b6:72:89:ba:6f:2d:4f:56:
ba:c8:be:ce:7d:19:41:55:90:60:5b:9d:a2:8e:6b:
4b:0c:9f:91:2d:24:3f:4c:20:32:14:a0:90:f1:23:
25:d1:df:bf:d1:2d:a0:82:cc:3b:dd:2f:12:d9:27:
06:e1:b3:9f:99:46:c7:48:9e:83:a2:49:fb:35:8b:
86:b2:72:e1:cf:0c:97:16:e7:de:99:87:d7:c1:50:
20:1a:f3:99:78:57:54:58:c3:ee:77:1e:b7:6d:c0:
ab:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.102.0.0/16
147.99.0.0-147.100.255.255
Signature Algorithm: sha256WithRSAEncryption
46:74:7e:07:e0:3b:b6:f8:a9:0a:00:dd:3c:87:84:f2:a4:06:
c0:fa:83:03:99:66:c3:0e:86:34:b3:da:f5:91:f2:96:f3:c9:
3d:ae:e2:86:a6:6c:45:31:f2:78:bc:ca:6d:82:03:59:df:af:
39:52:ae:fa:49:e5:78:dd:cf:59:2e:19:49:41:3d:c7:e4:9d:
b9:db:aa:41:88:c3:83:bb:4c:18:cf:6a:5b:39:54:4f:1c:8e:
97:8e:de:2c:b3:07:94:35:a3:a9:8f:95:e5:9d:e3:cd:6d:c2:
8d:30:d0:d7:dc:94:23:ca:5a:03:a1:5e:9b:54:9c:5a:a9:df:
cd:6b:8e:28:a5:c0:33:4c:19:0e:e7:9b:66:5d:8e:32:3a:f7:
10:57:c4:99:d3:9f:90:85:4f:16:59:7a:b4:21:a9:ff:e9:18:
be:6f:d9:f7:96:ce:4e:e6:99:42:5c:0f:bc:ee:47:ce:f9:17:
72:af:55:36:74:a5:4f:23:b1:f9:d7:93:2c:f7:db:d1:39:31:
51:b8:52:81:70:df:b4:f8:fe:7b:e2:2e:65:ed:a5:ef:bf:8f:
3a:26:54:ac:b2:a3:46:d5:39:31:30:ef:c1:56:5a:fa:92:0c:
5b:af:0e:9f:63:6b:d1:ae:a5:3f:63:a6:1f:1f:cd:db:01:8a:
09:84:0c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:14:04 2024 by rpki-client on console-ams.rpki-client.org