Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
File: odykS0q1RTP4tRls-S1o3rj8xeI.cer (raw, json)
Hash identifier: Aq0oC9zXgRzDL571ugM/j+3U1yuRGDCLc2c+DzwEvxo=
Subject key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DED6537601E0A169E0B89135D98A8D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57643
IP: 91.235.20.0 -- 91.235.25.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:d6:53:76:01:e0:a1:69:e0:b8:91:35:d9:8a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e2:af:bf:2b:5b:e4:44:bd:cf:11:dd:9a:47:
a8:75:34:54:e5:fe:7f:5d:19:c1:49:74:66:8b:4a:
1d:3b:74:c9:ad:f8:b6:1a:83:ce:80:d4:c1:39:62:
fe:c2:fc:09:9c:12:89:1f:ff:54:d9:0e:9f:b2:1c:
89:f5:b4:a1:47:ef:ce:c4:f1:9c:68:b7:4c:1d:3a:
18:f1:30:19:44:3a:5e:18:3b:44:c2:26:e7:78:38:
1e:18:91:b9:ba:b0:a0:54:56:91:6d:d7:23:9d:46:
72:07:a9:75:82:2f:0f:40:25:63:d8:39:0e:22:2a:
e3:94:1e:49:7e:d8:b5:cb:74:c7:78:27:51:03:b1:
fe:fa:03:18:a9:e4:0b:eb:a0:e4:c7:ae:f7:b8:5d:
3c:3c:6e:fe:81:66:79:40:f3:e4:07:68:7e:8d:fc:
a9:25:cb:56:e4:af:9c:bb:a3:9c:e8:1f:37:a7:24:
46:3d:49:57:20:fc:f1:8a:85:e5:22:f7:05:ee:22:
20:a2:4a:44:c1:f6:75:85:dd:fe:cf:65:08:bd:60:
7f:70:77:d4:89:92:08:92:1b:31:de:36:d0:99:3e:
c3:8b:0e:71:8b:e5:a1:2c:d3:c3:59:82:3f:aa:ba:
a5:14:59:61:6c:da:22:01:54:7d:8d:09:e9:2a:43:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.20.0-91.235.25.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57643
Signature Algorithm: sha256WithRSAEncryption
ac:19:7c:4b:dd:fb:7e:80:35:5e:16:c2:78:00:d8:80:0c:eb:
7c:14:20:07:a9:82:35:c1:94:7a:10:24:50:d4:40:04:9d:02:
40:4a:35:f8:bb:5f:3d:1e:53:96:c0:fb:a7:17:b9:bf:4a:ce:
c3:ef:82:b0:d7:37:2f:28:bf:c7:da:2c:67:7d:a3:59:ef:5b:
16:cb:82:cc:41:6b:2b:e6:0b:ba:87:5f:6f:ff:29:2a:94:cb:
41:30:85:4a:39:bc:23:7e:cb:db:87:1c:27:39:12:8f:0c:30:
5d:d7:68:ea:8b:33:0f:68:42:d0:32:e0:25:1c:ca:c6:b2:ab:
38:a2:86:c0:52:3e:f6:ca:5c:c3:12:b8:9e:48:ab:1a:7f:03:
16:0f:9a:2e:39:f3:4a:f8:4a:cc:16:73:92:fb:fc:c7:08:74:
a7:93:0e:1f:c5:28:6b:32:e0:38:b6:ec:db:39:37:72:b5:ec:
96:dc:44:56:12:62:af:19:37:ae:82:f6:21:ed:76:ad:12:58:
f5:61:f9:2b:62:71:68:7b:a9:df:f4:44:07:b8:28:43:ba:ed:
ec:71:0e:b5:8b:de:4b:d7:8b:16:09:92:2f:6e:b3:7a:da:67:
19:54:e3:d1:b4:68:39:d1:28:dd:da:72:8f:c7:bb:76:40:01:
7a:63:2c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:02:44 2024 by rpki-client on console-ams.rpki-client.org