Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
File: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer (raw, json)
Hash identifier: O5I8Ohb/anDTLkVDrPpm8ttLSAQ8VJLneYBfCW+on64=
Subject key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5001972D142B3952D361ACF3FD4DE8B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51773
IP: 46.28.208.0/21
IP: 2a00:ce00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:19:72:d1:42:b3:95:2d:36:1a:cf:3f:d4:de:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:48:e3:6e:cd:e4:5d:8d:93:f0:20:3b:11:
db:46:65:ef:09:ee:58:1d:3c:20:41:99:a2:8a:48:
24:20:28:a9:4b:a1:36:af:c9:7f:76:87:b9:5a:9f:
6d:b8:07:a4:ff:f9:7a:b1:44:41:b1:8a:a0:e0:fc:
a5:57:d3:5a:6f:12:51:96:79:a3:4c:c2:58:ee:5d:
e8:0d:a6:21:25:6a:28:bc:6e:6d:c0:83:3d:d4:d1:
6c:29:c4:f5:de:d1:bd:c4:ed:28:8a:3e:9f:4b:29:
c6:00:e8:a6:58:bb:84:90:29:55:ec:79:20:51:b0:
87:a7:8a:8a:d5:12:de:9c:26:bc:9a:f4:fe:9f:94:
39:8e:2d:af:bc:a3:ca:74:2d:bb:81:e4:cd:6b:19:
ab:a3:67:d6:8f:6e:81:6e:57:84:85:94:56:87:fd:
1f:49:b8:2d:15:95:43:b6:66:36:ae:16:a6:7e:60:
64:4c:f5:12:4a:84:16:4e:6d:55:bb:a3:d5:ab:b4:
04:1f:b4:51:e6:3a:f7:28:1e:5a:66:38:77:96:ee:
99:6e:4a:18:3f:eb:f3:71:fd:da:1f:32:6a:1c:82:
8d:6c:be:6e:b6:a7:66:4d:d4:23:82:3a:b3:d1:b8:
d2:1b:1f:fa:90:44:a3:ae:a7:e9:7f:69:b1:cb:c5:
ba:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.208.0/21
IPv6:
2a00:ce00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51773
Signature Algorithm: sha256WithRSAEncryption
30:9c:4d:3f:e6:b0:28:9d:26:f9:4e:8c:2f:66:c9:3b:93:44:
1c:ea:8d:39:e0:85:e6:26:a5:4f:55:a1:a1:b2:7f:ef:eb:f1:
10:c2:f2:f7:e2:6d:d1:bc:ce:da:d9:8d:d0:5e:28:f5:ab:6a:
68:c1:07:5b:9c:21:14:7b:42:0d:7c:14:e9:f2:64:3f:6e:50:
81:ec:ee:b1:8d:00:a7:1a:3e:d9:a9:3f:35:8b:fa:ff:a5:c2:
da:50:b6:33:ab:ff:72:50:3f:17:5e:8b:46:43:bd:14:a3:84:
77:f9:61:9f:38:be:0f:ad:cd:35:57:02:cf:78:9e:d0:29:a9:
2d:8f:66:b5:af:17:ea:7a:10:42:f7:a6:b2:04:f7:4b:ed:46:
d9:fe:45:e4:e6:e0:d7:ff:d8:7f:b9:7a:f7:7f:ab:33:de:12:
9e:76:88:fd:d2:d3:6b:25:23:7e:94:8e:df:c0:02:7a:21:aa:
32:b7:65:9a:d2:70:d2:3e:3a:19:7b:e0:09:b3:c5:d0:fd:43:
7f:a7:58:6f:c7:b9:15:fa:06:8e:be:de:bf:4a:cf:6c:bf:60:
60:38:ac:a3:e9:0d:45:30:c1:7b:b9:d3:54:dd:9f:4a:07:14:
ab:06:da:59:e1:b8:53:c1:ea:57:6c:72:e1:65:13:19:66:e7:
cf:41:d4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:58:32 2024 by rpki-client on console-fra.rpki-client.org