Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
File: oiw84jcbnyHFfgw6V4fZWnNctQA.cer (raw, json)
Hash identifier: Bbs26KF8t7eBfJhlmm6EOLTSmM4jE4Y3UTZ/fnix6tE=
Subject key identifier: A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC44F9E99219E62D33BFEAB990D3F3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197635
IP: 91.223.197.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:44:f9:e9:92:19:e6:2d:33:bf:ea:b9:90:d3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:dc:c9:0f:90:a7:02:2b:0a:f9:72:80:63:
9f:fa:e7:c8:3b:23:14:8f:e9:2c:fa:1e:fb:ce:7c:
2a:dc:61:99:ff:1f:d0:ce:e5:ec:8c:e7:c3:98:fc:
9f:48:1e:c0:8d:82:64:5b:1d:9a:94:df:5a:b5:7d:
51:aa:5a:31:1a:e3:a7:54:90:40:57:25:d3:c3:15:
8a:25:b4:f9:88:8c:76:ab:e3:a4:d0:3f:2a:ea:13:
8d:b4:06:36:31:31:14:9c:37:86:49:b0:7f:84:96:
ce:f9:ef:a8:e7:84:59:70:6c:a8:19:52:00:59:5e:
35:e9:0d:e2:1c:03:05:4e:0e:6c:c9:f5:2f:b2:94:
27:39:c7:a2:35:7b:02:23:be:a5:64:bb:bb:54:cd:
78:3b:ee:d6:ab:64:56:0a:5e:27:4b:f6:6b:96:0f:
88:13:38:c8:e1:d9:67:44:26:33:6f:63:e4:56:42:
b2:59:cd:e7:16:a6:92:27:9e:82:55:8c:e5:0a:f2:
24:ce:0a:dc:4f:54:6e:fb:4d:e4:5a:7a:b6:e6:e3:
15:0f:98:3e:7d:92:ba:c4:c1:d2:76:d6:ec:43:bf:
1a:be:a8:35:76:bf:95:50:ed:7e:dd:eb:9a:3b:cd:
f5:e9:50:07:81:5a:37:fb:57:94:1f:9a:39:c9:5d:
dc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.197.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197635
Signature Algorithm: sha256WithRSAEncryption
96:9b:5d:22:1f:37:84:88:21:03:27:27:5f:c2:85:7e:b6:ec:
7a:af:01:29:26:5d:a9:40:84:52:30:28:f6:e3:8f:fb:fc:c3:
2a:03:c5:79:a2:10:9c:65:e1:50:e7:7e:4c:3a:52:44:fd:70:
11:92:c8:e7:89:dd:89:8a:b0:9c:54:ca:c3:5c:b7:0c:dd:07:
b5:64:f5:13:34:f7:ab:8d:f0:5f:6d:86:10:c8:74:44:3e:bf:
be:c6:08:03:d5:d7:da:71:b0:cc:5e:c6:06:98:4a:f0:8b:e8:
eb:0f:12:0a:7b:29:68:cf:55:20:39:ea:5f:db:cd:cc:32:bc:
41:98:22:cd:71:be:61:a8:15:fb:cc:e9:dc:4c:30:59:a6:6d:
56:14:53:a2:6e:07:e2:0e:bd:d4:9c:ed:3a:0f:25:97:22:e0:
31:12:0b:e8:16:2c:45:7d:47:8b:08:ca:53:58:31:2e:d3:d8:
56:b9:6c:85:62:dd:75:d0:90:53:ee:d3:d3:04:70:57:9c:6d:
3b:c3:be:b0:66:33:81:f4:6f:61:71:65:e5:07:ba:2b:47:45:
5a:18:82:08:06:62:78:35:13:1f:52:ef:f6:ca:3f:29:2c:3b:
bb:8c:7d:2c:8f:21:1f:f9:f2:45:36:46:ae:55:df:ac:91:f5:
5b:d1:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:44:51 2025 by rpki-client