Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.cer (raw, json)
Hash identifier: dGMIF1YSlOMqkhKc65BMYjoSVWg4msew6UmoiGpSF94=
Subject key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DCDAA42B4684FB5B330FBA045500F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44486
IP: 45.88.108.0/22
IP: 45.135.200.0/22
IP: 91.218.64.0/22
IP: 2a04:e8c0::/29
IP: 2a0c:75c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:da:a4:2b:46:84:fb:5b:33:0f:ba:04:55:00:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:8a:e9:9e:f7:92:83:1c:44:ae:74:81:7c:
2a:85:98:2a:ab:10:6b:9a:c7:54:ce:80:38:da:69:
82:17:c2:28:e7:f5:40:8f:83:54:34:7f:a7:75:be:
ef:57:4d:12:cd:69:16:98:ec:f0:84:c6:7d:6b:04:
20:d7:15:5e:21:cd:7f:b9:c8:84:47:b8:a1:e5:58:
bc:99:32:48:24:81:a9:ca:9f:8b:2e:2c:a0:1a:77:
85:08:55:65:97:55:93:af:4f:c1:f8:95:19:c1:ca:
3c:f7:e2:a5:0d:c6:24:e6:f2:d0:8d:ae:78:7e:66:
e4:32:88:31:24:1b:d0:10:da:4d:57:b0:db:34:33:
77:d1:82:e2:cc:95:1c:5f:6a:61:9b:a6:7a:d5:79:
1f:4e:a3:4d:b1:5a:0b:52:50:4e:ea:b0:6d:62:42:
73:47:75:54:ea:7f:82:72:45:c0:a6:3a:26:e6:23:
4b:32:9c:12:a4:8a:2d:92:a2:c7:98:8c:8f:22:e4:
41:c7:62:8b:c3:15:fe:16:cc:f4:45:b9:e5:bf:ad:
62:59:d4:ab:ba:3d:71:09:f8:a4:71:b3:32:b2:d8:
3d:70:b2:cc:52:0e:db:c1:ba:dc:93:70:13:40:ed:
23:58:43:7d:cc:17:b7:42:d1:f4:d7:c5:ef:16:74:
60:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.108.0/22
45.135.200.0/22
91.218.64.0/22
IPv6:
2a04:e8c0::/29
2a0c:75c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44486
Signature Algorithm: sha256WithRSAEncryption
36:6b:82:01:cf:a1:fc:f9:0b:63:5b:72:6a:20:c3:5a:20:0d:
cc:7c:36:78:0b:e1:16:6b:cb:d3:9d:a2:71:cd:69:54:a5:2f:
bb:c1:f3:ce:92:7c:10:b9:2d:70:a1:2a:f0:d8:54:11:00:dd:
b8:fc:d9:aa:cc:3b:af:26:5e:38:2a:f5:b0:9a:7c:6c:b0:3d:
26:7d:6c:e3:7c:66:ab:a3:ee:11:e2:eb:83:a8:bc:3f:ad:64:
90:a4:0f:d3:92:75:36:41:24:75:d8:0f:43:98:72:7e:fd:3c:
b0:0c:17:bd:0b:87:ab:84:a6:f2:8f:cb:49:9f:c9:a7:e9:92:
6f:0e:e8:fb:ef:df:aa:d7:60:e8:30:6f:9f:d2:bb:76:e5:2a:
31:d5:f5:9e:c7:b2:1a:f4:51:8b:e3:6e:86:b9:ea:0e:2c:64:
90:74:02:41:63:80:c1:46:5d:5e:d1:02:55:0f:39:15:9f:30:
c0:e2:4f:60:db:4f:34:a3:d7:6c:62:93:97:30:a9:dc:cb:9d:
d9:5b:59:f7:40:a8:8b:33:e0:38:73:bf:d7:a4:3b:9f:e8:ad:
40:c1:9f:48:41:9f:aa:d9:92:97:51:22:eb:ab:c7:a2:cf:5f:
4d:8c:9a:74:b4:6b:bd:f8:cb:43:b1:b8:b5:bf:75:03:ea:26:
b2:f2:38:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:58:33 2024 by rpki-client on console-fra.rpki-client.org