Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
File: otlSJFuzTkDNq11LCQFDwNhYE5A.cer (raw, json)
Hash identifier: we6xzJceAWb8ol4MjPq1upbTMKrlzyvpjFIXVYLh0ss=
Subject key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5013559A6EE3751F7EECBC4424151FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206656
IP: 185.179.192.0/22
IP: 2a0c:4140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:35:59:a6:ee:37:51:f7:ee:cb:c4:42:41:51:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:e2:a6:0e:75:57:02:7f:a8:74:ba:3c:2a:
b3:a4:90:38:25:d5:05:95:2b:0e:b3:1e:1c:50:85:
e0:9e:d5:ff:9b:fb:9e:61:ab:d5:9f:55:0f:b5:6d:
1f:08:5f:d9:f1:69:1f:a3:36:8f:2a:61:51:ba:28:
96:0c:40:e2:3b:72:c4:36:c0:6b:98:ed:86:8a:aa:
e7:a5:41:9a:e7:ec:db:53:41:44:38:37:24:9c:8a:
ac:4f:8c:54:84:d4:12:b9:ed:f8:f2:c5:5a:fa:9c:
2b:55:9a:29:77:c6:64:db:a5:c4:04:50:4e:5d:7a:
c7:2a:c3:3f:b6:8a:fa:e5:1f:f2:05:57:8f:4d:b2:
b4:dc:08:8a:20:dd:12:1c:03:21:9d:f5:2c:41:d3:
81:d5:04:3c:62:4e:78:c9:2c:56:32:bf:df:85:9b:
ea:79:83:f8:a3:93:c5:c4:71:2c:f0:47:76:41:7c:
3f:a9:39:a7:cc:bf:ec:37:13:41:da:36:a6:88:ea:
7b:16:50:d5:c9:ae:22:ff:ed:c2:dd:c1:c2:bb:f6:
e9:0d:a5:c7:a2:0c:1c:c6:b9:6a:46:d1:aa:07:76:
51:65:c1:82:df:61:86:8b:fe:13:fe:b4:00:2d:ac:
11:45:e2:45:e2:ea:31:bf:ef:2c:65:10:54:11:5c:
ea:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.192.0/22
IPv6:
2a0c:4140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206656
Signature Algorithm: sha256WithRSAEncryption
4c:63:9a:39:e5:eb:a5:81:80:12:60:10:0b:10:ed:02:01:b1:
12:32:14:55:11:ab:6c:cd:ce:69:e0:2f:fe:14:1c:b7:5c:9d:
d3:e1:39:cb:9d:c1:d7:ed:90:29:a2:0f:9c:5d:81:b8:31:4c:
73:bf:ed:15:72:64:da:a1:17:b2:2b:b1:ac:bc:83:eb:9b:ec:
f6:b0:e2:08:60:28:ea:55:cc:bb:a4:ce:90:52:ca:b9:be:c2:
11:ff:0f:e8:c2:bd:68:4f:e4:2e:15:19:f0:6a:18:fa:94:4d:
4f:7c:a7:33:4c:be:e4:39:ce:47:63:83:41:b0:b6:c8:7a:c1:
77:82:a8:fb:47:dc:9d:cd:41:5c:c6:0c:4f:55:01:66:24:fe:
d9:ba:da:52:48:e2:b4:88:4a:89:ea:d4:17:81:93:c2:e7:db:
91:56:4f:7b:04:5e:c8:e6:3c:94:f3:f4:f7:b8:e7:f0:59:09:
d7:85:ab:ed:7c:56:e0:f9:7d:bb:5c:c7:81:a5:8e:da:48:67:
cf:d1:20:6a:17:91:aa:6b:8a:4e:8f:8b:a7:e5:5c:2f:8e:16:
75:1f:84:9c:fd:29:38:ae:19:33:0f:f2:41:42:b4:9d:9e:64:
67:a5:88:47:5b:f0:38:75:53:c5:19:01:73:52:31:1b:8a:5c:
11:22:b7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:14:19 2024 by rpki-client on console-ams.rpki-client.org