Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
File: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer (raw, json)
Hash identifier: yri1mtYl4kaKoJCX122wEdgY2pRVQ4eENn7p7KzbYjs=
Subject key identifier: A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF320A0679FC57AA1F341F29052865
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200750
IP: 91.227.63.0 -- 91.227.67.255
IP: 194.180.108.0/23
IP: 194.180.170.0/23
IP: 2a0f:4640::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:32:0a:06:79:fc:57:aa:1f:34:1f:29:05:28:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:64:99:3e:54:e7:1c:22:40:06:4b:93:cf:8c:
45:85:7d:3b:63:29:40:b7:ae:f2:ec:19:06:dc:fc:
9a:6a:21:ff:66:67:55:09:97:47:a1:00:fa:6d:87:
dd:f9:41:e6:93:d5:19:97:94:28:5e:04:2b:75:f2:
0d:52:cc:ca:da:22:9c:d7:10:20:12:ac:d6:ef:56:
6e:05:de:46:9a:1a:4d:0c:d6:24:e6:28:31:db:a9:
22:c8:56:d8:58:4a:b3:8b:ab:9f:77:59:16:c3:71:
5b:2e:72:42:b6:cb:ec:e9:1a:b0:40:5c:60:95:63:
93:60:41:c8:f0:dc:ea:f8:76:99:06:dd:f2:6c:09:
6d:d9:f6:f4:97:9b:68:d3:9c:3d:58:53:6c:5d:4d:
b9:42:f5:10:38:fb:67:47:4e:f6:db:1f:6f:ef:1b:
e7:ff:e7:67:88:34:63:d0:89:29:fd:2a:14:b5:58:
ec:89:e3:5b:49:b0:4d:51:aa:d0:c6:8a:82:dd:6e:
79:2f:2f:6f:08:97:cc:16:4c:25:d3:f7:f7:bb:94:
0b:da:04:37:13:83:7a:a3:28:2e:e5:6e:8f:65:fd:
cb:a9:94:5f:87:26:cd:0b:bd:89:97:7e:fb:fd:9f:
71:e9:ee:d8:72:06:de:3c:6d:f5:de:47:0c:9c:e3:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.63.0-91.227.67.255
194.180.108.0/23
194.180.170.0/23
IPv6:
2a0f:4640::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200750
Signature Algorithm: sha256WithRSAEncryption
9b:7a:d4:f6:d1:7f:f7:7f:7a:a0:4e:11:14:d8:1d:4f:6e:eb:
f2:cf:42:cc:f8:8d:aa:5e:a3:4e:e5:06:ac:00:9e:1b:64:8a:
56:ba:76:08:dc:eb:bb:72:3a:3d:ec:bf:75:35:be:53:e1:10:
5f:0b:6f:fb:3e:06:a8:1a:b7:2e:25:d6:a9:2d:32:ca:59:71:
76:2d:e9:11:84:96:46:f3:28:04:21:4e:de:a2:17:a3:91:8c:
ac:60:fe:6b:ab:9e:27:fe:20:09:ab:2f:36:f3:9e:ce:2c:36:
b7:32:a1:0d:d7:4a:da:2f:70:d5:29:a0:a3:c5:22:a0:ce:74:
a3:8a:88:1f:8c:eb:7b:63:2b:a4:69:7a:d9:b3:be:a8:dc:b7:
d6:db:bb:14:14:8f:73:99:ce:9c:b6:1f:69:1b:28:c8:88:78:
60:8c:f0:ad:b6:8c:9b:4b:ea:40:96:de:12:54:b9:11:22:26:
2b:aa:40:5f:01:63:ad:50:03:f1:42:10:e4:eb:c8:55:4e:cc:
88:92:6f:40:8e:17:3b:a8:2e:17:8a:be:5b:ea:be:cf:2e:b4:
1a:c4:21:0b:f9:db:d4:f4:8a:b7:48:01:6b:9e:3b:87:98:9c:
da:de:9e:96:06:1e:1a:67:b4:4a:ce:a3:2a:55:a1:3e:60:a3:
e6:00:61:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:18:13 2024 by rpki-client on console-fra.rpki-client.org