Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
File: oI5By_3vrQuw4pckeswaIB0t9KA.cer (raw, json)
Hash identifier: 60PTbkEHyPGaTYZgycvRktrE7ijcAIPDKW8RtKwZwbs=
Subject key identifier: A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A2EE1E5ACE96A8DFC06672541B0D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211606
IP: 185.254.121.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:2e:e1:e5:ac:e9:6a:8d:fc:06:67:25:41:b0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6b:4b:8c:d6:3c:e9:3d:4c:d5:e7:47:1f:40:
c5:d5:fe:b3:07:81:ac:84:bd:f3:5e:3c:8e:b5:64:
30:26:8e:5f:24:97:f4:bb:f9:e0:e6:84:a5:78:78:
64:db:6d:39:e8:0a:2c:97:15:b2:a6:70:52:5c:b2:
28:ba:fc:5d:d7:e9:07:7a:0a:d5:87:45:0b:27:d8:
38:47:1a:4f:74:88:e4:1b:34:bd:d3:aa:ed:b0:f9:
b1:b1:3d:64:2b:27:c6:4d:99:99:54:f1:d8:47:6b:
9d:1b:a2:6e:91:00:3a:51:f4:ce:4f:67:ae:83:d3:
39:10:ef:b5:6e:fa:75:22:a0:fe:0a:ad:c2:11:49:
63:58:f3:a7:be:17:34:f5:1d:6e:11:79:3f:99:9f:
1e:a4:29:31:1f:b0:70:f6:d0:e4:23:35:c1:4e:df:
50:b2:57:d0:8b:78:f7:2b:98:d0:64:47:5e:fe:2d:
79:b4:2c:b4:64:29:4d:8c:9d:46:75:b1:65:de:fe:
35:66:ce:b2:06:5b:09:35:a2:a9:06:c1:f0:f9:da:
0c:0f:a7:02:b4:99:c0:08:4b:4a:48:68:73:44:c4:
f3:77:ca:40:b6:ca:cd:7a:48:ca:14:7b:e5:1c:ab:
c9:8c:64:ff:df:a1:d2:b7:db:ab:3d:6f:37:50:a2:
d3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.121.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211606
Signature Algorithm: sha256WithRSAEncryption
21:a7:dc:62:b2:3e:14:14:9a:34:a4:43:a9:bc:11:48:df:bd:
44:ad:74:59:2b:6e:32:c8:f9:6b:b3:e7:f0:cb:85:57:06:6a:
13:d8:f5:b5:de:09:58:81:47:bc:e1:43:61:45:74:85:ac:bd:
76:91:3b:6b:0f:f3:2d:98:9a:f8:cf:12:c7:0d:33:84:63:42:
9e:68:8c:14:a7:dd:97:b3:ae:7a:c1:d2:4a:03:63:b0:2e:2b:
3d:1f:e5:28:32:57:8e:92:09:20:8f:a4:85:70:af:e3:c5:50:
b6:e8:33:38:87:00:34:13:9f:3a:55:01:9f:10:a1:38:d0:6c:
17:28:9d:94:96:06:27:c8:f1:28:17:07:43:90:8e:69:f8:d6:
b5:77:dd:f9:33:f0:fd:e4:ad:fd:af:ac:01:a4:9d:44:32:32:
70:5d:d3:b3:bf:16:fb:ae:1c:6e:7c:60:fb:50:a6:72:53:8c:
ce:26:0d:71:a1:67:58:e8:c3:22:11:b3:08:32:33:e3:84:19:
78:44:1c:67:fb:28:89:43:a4:0a:49:53:22:c1:20:7c:1d:65:
95:5d:93:7b:77:3e:3b:36:41:80:37:ad:66:42:9a:9e:a8:a2:
e1:bf:be:c6:a2:2d:c6:63:1d:95:d1:c6:ce:ed:92:13:8c:d0:
e1:84:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:02:31 2024 by rpki-client on console-ams.rpki-client.org