Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
File: oiw84jcbnyHFfgw6V4fZWnNctQA.cer (raw, json)
Hash identifier: qEsYb7y6oMFY++ZBeQ+4yTSBBFsQH4FlTmmC+by2Jkc=
Subject key identifier: A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7EBC981C42DC18B49C2544B16CC0D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197635
IP: 91.223.197.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:eb:c9:81:c4:2d:c1:8b:49:c2:54:4b:16:cc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:dc:c9:0f:90:a7:02:2b:0a:f9:72:80:63:
9f:fa:e7:c8:3b:23:14:8f:e9:2c:fa:1e:fb:ce:7c:
2a:dc:61:99:ff:1f:d0:ce:e5:ec:8c:e7:c3:98:fc:
9f:48:1e:c0:8d:82:64:5b:1d:9a:94:df:5a:b5:7d:
51:aa:5a:31:1a:e3:a7:54:90:40:57:25:d3:c3:15:
8a:25:b4:f9:88:8c:76:ab:e3:a4:d0:3f:2a:ea:13:
8d:b4:06:36:31:31:14:9c:37:86:49:b0:7f:84:96:
ce:f9:ef:a8:e7:84:59:70:6c:a8:19:52:00:59:5e:
35:e9:0d:e2:1c:03:05:4e:0e:6c:c9:f5:2f:b2:94:
27:39:c7:a2:35:7b:02:23:be:a5:64:bb:bb:54:cd:
78:3b:ee:d6:ab:64:56:0a:5e:27:4b:f6:6b:96:0f:
88:13:38:c8:e1:d9:67:44:26:33:6f:63:e4:56:42:
b2:59:cd:e7:16:a6:92:27:9e:82:55:8c:e5:0a:f2:
24:ce:0a:dc:4f:54:6e:fb:4d:e4:5a:7a:b6:e6:e3:
15:0f:98:3e:7d:92:ba:c4:c1:d2:76:d6:ec:43:bf:
1a:be:a8:35:76:bf:95:50:ed:7e:dd:eb:9a:3b:cd:
f5:e9:50:07:81:5a:37:fb:57:94:1f:9a:39:c9:5d:
dc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.197.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197635
Signature Algorithm: sha256WithRSAEncryption
0f:82:95:d0:cd:86:12:e6:2d:1b:3b:9d:36:00:ed:bd:f8:d5:
ca:50:6b:09:cd:21:f3:72:e7:df:39:eb:62:08:fc:d3:f9:c3:
f6:28:09:f7:b8:b2:2f:06:61:fa:08:e6:dd:67:48:b5:37:35:
de:10:bf:ef:bd:f1:c5:f5:1a:06:57:96:47:0d:f7:24:3a:6e:
7f:69:5e:1e:f8:d0:de:6a:8a:cb:c2:ba:0d:65:3c:28:22:b3:
01:70:8a:36:f2:a6:21:36:62:b1:87:fb:e6:fa:85:7d:dc:aa:
05:f0:a0:b1:6c:99:db:3d:49:94:3d:33:97:35:9f:f5:0d:b8:
16:3d:36:23:a6:43:b4:25:2e:08:ee:ce:96:91:66:d2:a7:b6:
58:1f:12:19:8b:24:84:f2:44:7f:72:2e:17:b0:36:b9:0c:e5:
86:16:1d:bc:87:f4:c2:42:aa:f1:5e:16:72:2c:d2:a4:d9:8d:
47:77:34:0a:c2:52:09:18:b1:8a:e6:f0:b8:15:85:aa:98:c1:
81:4c:16:d8:c9:d5:f2:7c:42:b6:58:ff:6c:41:9e:40:b6:95:
cf:43:27:c2:34:e0:e3:d7:bb:0b:7e:9e:aa:08:b4:cf:e2:0b:
4c:dc:70:f4:2d:ec:0d:eb:7c:a4:57:16:cf:f5:25:a8:fb:c7:
da:b3:07:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:58:48 2024 by rpki-client on console-fra.rpki-client.org