Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
File: om1GISmD2nHzGuV-WcOeCbM5ygI.cer (raw, json)
Hash identifier: 11d8ac8EPhiSrH+tkkwrxgT1Q7EpR0yhPs1QgVEpXiU=
Subject key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DCCE40D9439A0788B0D2F49C2DE4DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47511
IP: 91.206.82.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:ce:40:d9:43:9a:07:88:b0:d2:f4:9c:2d:e4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a26d46212983da71f31ae57e59c39e09b339ca02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:e6:18:cb:b0:3b:48:59:37:a3:99:29:63:
28:b6:df:d2:6e:cb:b1:9d:24:44:e1:fd:b2:0b:f6:
a8:5d:c9:81:28:d8:06:50:07:1c:0a:f1:57:4e:a5:
eb:30:52:1b:b7:e3:b3:1d:98:17:a2:cd:3c:a9:bb:
e3:88:d7:49:2e:32:9a:fe:61:ee:68:d6:78:8f:87:
9a:4e:c2:da:d7:95:25:d4:58:2c:ca:45:7d:d4:cd:
a9:11:81:de:cb:26:72:d9:a6:47:47:fd:98:7a:83:
3b:7b:2c:a3:44:43:48:18:a0:37:a2:68:5e:21:81:
73:c5:85:f2:0c:8e:02:d1:04:3d:83:05:ee:18:8c:
fe:4b:c7:98:e7:5e:88:0b:08:1d:b4:45:6f:20:64:
e9:9d:96:89:34:42:6b:bf:f1:e5:4b:e1:03:0a:aa:
71:21:18:fb:a1:d8:e3:ec:f7:6f:5e:09:41:45:7d:
79:ed:37:c2:84:dc:19:94:c9:ec:38:3f:de:62:c2:
ee:c3:f4:18:17:8f:4f:f0:54:5d:06:cf:0e:d1:ff:
86:66:45:cb:35:9a:e4:eb:8c:7b:22:5f:65:af:03:
ae:e9:72:17:e1:33:84:d9:b2:e9:67:4c:0a:44:29:
6b:c9:0f:96:2f:51:9f:f9:4e:26:fe:5a:96:f7:d9:
8e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.82.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47511
Signature Algorithm: sha256WithRSAEncryption
13:4b:d0:d2:0f:96:b7:45:49:e0:ec:b4:dd:93:3f:de:52:6e:
39:0e:7f:72:21:de:bf:52:99:af:72:d6:62:1a:3f:e8:34:a7:
ee:57:f1:1e:33:76:28:70:88:42:5b:c5:e1:d4:20:f6:a7:54:
cf:6a:60:e3:23:c5:48:3e:b6:23:47:09:d1:f7:e6:83:e2:14:
02:93:07:d8:f2:ec:c4:09:66:90:d6:d7:e8:70:1c:88:89:f7:
17:dd:e4:75:50:53:10:d9:b2:b0:5f:f4:ad:02:8a:55:55:5a:
78:9d:8b:b2:46:ff:19:06:7c:c5:3b:a8:d6:2c:36:5a:58:b1:
29:f8:54:d2:9e:ba:08:cb:c2:a4:cf:67:c6:f9:b5:ee:52:e6:
b8:32:b4:0b:f8:d2:15:f3:f5:d6:5c:bb:f7:9c:a9:71:aa:31:
22:5d:f9:5d:c4:66:35:a6:03:2d:2f:94:bc:b7:62:32:c8:08:
55:d6:05:2c:24:76:5a:0e:ef:44:3d:f6:3d:89:13:e8:9c:d9:
30:fe:9b:e3:8c:a5:e1:49:be:28:45:ca:04:76:0a:cd:9f:8d:
bd:bd:1a:3a:b2:00:40:4c:d5:fc:56:44:a2:cc:cb:5a:38:25:
cc:1b:bf:d6:1e:56:ba:d2:45:ff:ef:29:f5:99:f6:1d:4a:47:
29:58:18:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:18:08 2024 by rpki-client on console-fra.rpki-client.org