Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
File: oWsNirSUNlULar9Ft5A1rsav8jw.cer (raw, json)
Hash identifier: sqPtWCelacqdafqURlg618iFyB+Fwp2YNYWWRmQqT2E=
Subject key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BAA4B71E0E195367478FCAA8A20919
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:31:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 20836
AS: 34971
AS: 200522
IP: 37.247.48.0/21
IP: 95.157.64.0/18
IP: 178.249.184.0/21
IP: 185.34.136.0/22
IP: 185.47.228.0/22
IP: 188.164.128.0/21
IP: 195.88.4.0/23
IP: 217.171.32.0/20
IP: 2001:b60::/29
IP: 2a00:dcc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:a4:b7:1e:0e:19:53:67:47:8f:ca:a8:a2:09:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:fe:8a:5e:c4:cf:61:a8:c3:f2:05:c5:e0:
f6:f2:ae:ce:37:ed:6f:f6:39:fd:4a:db:f9:f1:4a:
b9:4b:f7:84:a3:e2:e6:f2:47:f8:2c:54:53:22:82:
fd:22:df:9d:48:00:dc:2a:d4:fd:16:e9:e7:e5:6c:
f6:a8:c3:ad:86:e7:a2:08:70:93:25:1e:06:04:78:
4f:2b:83:01:43:61:70:14:8c:e8:0f:e7:93:4e:b5:
46:d0:1b:78:dc:65:00:a8:6e:75:f1:2e:df:ec:f1:
7a:81:ba:b8:15:96:f4:05:5b:52:4f:04:09:d8:38:
82:74:5d:57:c1:b2:67:5f:be:00:e4:06:0b:ac:0f:
92:ad:0b:25:4d:73:a3:a0:6e:99:5a:19:b0:05:05:
65:35:4b:fd:ae:2e:11:fd:f6:62:bf:6b:ff:00:00:
c4:2c:e2:fc:37:20:f4:0d:30:2a:74:72:84:b5:40:
c4:4e:ab:b9:47:ef:08:5a:6a:37:57:b9:a1:f1:e5:
60:1b:92:05:e4:02:95:fc:34:7e:e7:03:01:89:f1:
b9:0d:1f:f8:1d:df:d8:6c:fc:b5:ae:78:0b:44:8f:
0a:97:73:c8:17:50:8a:7a:19:4b:b8:17:cb:97:86:
1a:9f:0d:f9:c1:36:c6:fd:ab:fb:cc:f1:a6:2c:e3:
de:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.48.0/21
95.157.64.0/18
178.249.184.0/21
185.34.136.0/22
185.47.228.0/22
188.164.128.0/21
195.88.4.0/23
217.171.32.0/20
IPv6:
2001:b60::/29
2a00:dcc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20836
34971
200522
Signature Algorithm: sha256WithRSAEncryption
32:f0:ce:16:86:35:58:1a:fd:23:fb:a6:ff:a8:67:0d:07:95:
1d:a0:bd:19:64:a4:5e:dc:f0:e3:e2:4d:f3:8a:a4:50:8e:b9:
18:ed:1a:6d:1a:c8:c7:92:c0:0b:31:6e:7a:5e:19:42:8f:7d:
e3:69:99:df:e4:e5:74:b3:7d:a6:2d:93:7a:52:00:94:15:60:
cb:95:8e:84:4a:ec:59:d5:f4:74:20:ee:17:8a:40:30:df:f7:
7c:ff:39:9a:c9:b1:92:23:85:64:7b:7c:e1:d2:e8:02:e8:e4:
3c:b8:db:03:17:d4:c8:e7:fe:34:6e:b3:38:d4:1e:ab:ee:e4:
cf:16:0b:62:5b:fa:3d:d3:bc:c7:ac:f7:73:57:cb:76:d4:dc:
68:d4:8b:46:02:54:44:65:8a:f1:d7:99:56:7e:ee:81:27:84:
8d:93:28:d1:00:65:d7:c4:e6:0c:86:d5:70:bf:85:bc:e5:30:
8b:96:d4:ec:48:2a:d1:08:34:0e:05:9b:f1:d3:a3:28:a9:8e:
ef:88:7c:de:e5:8c:4b:59:b6:90:7a:2d:d2:c3:75:3d:a8:cc:
a8:b0:0c:20:20:cf:c9:e4:99:fb:ea:65:55:0f:b9:af:ab:2a:
4d:42:a1:12:49:ae:7d:a3:a0:e2:1f:50:01:ed:01:db:bd:4b:
10:3a:d7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:02:40 2024 by rpki-client on console-ams.rpki-client.org