Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer (raw, json)
Hash identifier: xKZKrt/vac0gqBMjcJdj0pbR7pQ6LBe9/TryO45JedQ=
Subject key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E84EF71A795E63057A07D07EDF1A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47492
IP: 81.161.224.0/22
IP: 185.94.232.0/22
IP: 2a03:e840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:84:ef:71:a7:95:e6:30:57:a0:7d:07:ed:f1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a10c73530bb684fd569dfc432704675704183429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:96:5b:5d:db:d0:6f:60:ec:36:65:44:77:
f5:2f:92:50:a7:6d:b7:4e:8d:5c:86:c3:3d:44:12:
62:85:8d:d8:14:7c:71:a0:77:c3:95:4b:9a:ec:42:
87:cd:c5:55:61:e1:45:a0:b8:4f:b4:94:eb:70:97:
57:a8:a1:fb:5d:41:7c:81:3d:ba:dd:06:c7:50:b1:
55:50:3a:ee:db:79:ae:00:28:3a:a7:16:c4:d0:9b:
70:77:48:13:e1:4f:26:e5:5d:10:aa:93:ea:ad:f7:
e3:2a:5e:1c:5b:94:65:68:f6:b8:62:92:c9:70:65:
d0:19:ad:2e:e2:12:91:b6:95:74:00:f0:d1:be:42:
55:4c:ab:bb:2c:76:88:0d:80:b3:07:60:29:ba:a0:
06:b9:6b:fe:a9:cc:df:1c:05:e5:e0:be:14:89:ef:
cd:96:9d:ba:66:73:be:fa:3a:e7:8c:0b:5b:a5:bd:
e5:8d:8a:56:c9:bb:83:4e:77:3c:b0:16:29:3f:73:
4a:0b:61:47:2a:51:f5:73:0e:cd:60:56:27:4c:f8:
af:d2:33:15:1c:ee:fd:eb:64:4f:76:11:bd:93:2a:
5f:3d:ce:2a:14:7b:55:4f:56:5a:66:5d:8a:ef:ad:
fc:5f:4c:d2:09:36:e0:42:c1:bc:76:ef:20:60:d3:
9f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.224.0/22
185.94.232.0/22
IPv6:
2a03:e840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47492
Signature Algorithm: sha256WithRSAEncryption
60:28:8d:d4:04:2b:03:41:e0:18:5d:ad:bc:4f:3f:6c:ea:1e:
8f:9e:5c:9d:dc:ec:06:6e:8a:b6:87:62:fa:b9:23:a1:33:20:
fe:65:73:75:c5:86:dd:9d:bc:88:ac:f2:69:65:3c:e7:18:83:
18:e9:15:80:55:0b:68:3f:5f:65:f8:45:be:e5:4c:68:32:de:
15:3e:16:37:f3:9f:24:5f:79:a1:1f:bb:4b:d4:5f:d2:ad:d8:
e2:81:1e:e3:dd:88:d9:70:19:82:13:95:b6:e4:34:5d:ba:b0:
d1:46:42:ed:f8:62:80:77:5b:c5:08:b4:cc:bf:70:01:0e:b2:
19:cd:8e:f3:43:13:b3:c1:65:30:83:6a:a7:ab:ad:05:ad:c1:
b4:32:24:a5:3a:19:ef:82:06:fb:19:ca:fe:9c:dc:f7:ba:f5:
89:ac:a8:d3:99:3f:b7:95:2c:ab:71:bf:73:b6:30:6a:f4:6f:
ec:bd:51:11:59:61:29:47:00:fc:ba:c9:d4:4c:3f:6e:6c:00:
17:85:07:b7:cd:ab:34:4a:1f:d2:bd:e7:58:a7:57:bc:30:80:
e8:c7:22:b2:22:f3:c9:1d:e2:db:e1:09:b9:a1:5f:61:f8:fd:
9b:74:17:5c:d4:e7:e8:97:8f:e3:14:9b:32:5b:d6:ab:bb:3e:
33:c4:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:58:33 2024 by rpki-client on console-fra.rpki-client.org