Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
File: owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer (raw, json)
Hash identifier: o5olkLNtAbdaNLOKnPnvUQJp+VQTz5SiVqnzKSEM+90=
Subject key identifier: A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DFB060EA93A490A281D5E20ABC86EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208873
IP: 45.81.156.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:b0:60:ea:93:a4:90:a2:81:d5:e2:0a:bc:86:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d0:2f:4c:9a:78:6d:37:71:49:4b:91:b8:15:
03:72:79:8b:48:5d:f3:6d:c4:f1:19:4e:43:07:80:
d1:ea:a2:64:b0:01:da:67:cf:d7:89:16:29:e0:e1:
67:1e:5b:e7:fd:ea:6e:5a:f8:32:89:29:38:44:3a:
70:9c:ae:cb:4b:79:eb:28:db:4e:4f:20:67:30:eb:
89:f9:07:aa:71:e8:70:44:a9:4d:9e:73:1d:7a:8c:
42:5f:2a:1e:e3:14:19:c1:79:f7:82:ca:68:15:4d:
52:f9:67:d1:11:16:30:37:90:1f:f2:1d:9c:8e:3e:
94:27:84:87:ba:7b:84:ed:f3:d1:39:7f:27:9f:61:
c7:3b:fe:1b:2d:74:86:85:99:3b:13:cf:11:ff:f1:
85:fa:07:47:44:9d:1d:de:80:4b:29:86:3f:f4:1f:
23:7a:f8:ef:a6:c9:81:37:42:95:9d:b6:6e:b0:69:
90:af:6f:34:3e:e9:e6:42:b0:81:3f:70:ba:a6:c7:
d9:d0:4a:56:80:b9:67:02:27:0e:9e:c0:05:0e:9d:
85:58:f8:1f:74:bb:e9:f8:5e:f7:63:a3:ae:89:81:
54:66:3c:72:d9:52:96:83:34:9c:97:96:f8:fb:ab:
f0:7e:4b:85:a6:1b:6c:d5:e8:f9:b6:ef:5c:d6:8b:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.156.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208873
Signature Algorithm: sha256WithRSAEncryption
66:fb:0d:e3:0c:85:6b:4b:85:03:7e:43:a4:ee:77:c2:74:41:
b4:1a:13:b0:1d:55:f1:d1:f9:11:f6:3d:1b:f7:b7:93:9f:43:
e7:eb:96:af:ab:59:9a:27:8c:af:52:e9:0a:12:37:d1:56:06:
22:ca:14:b8:3c:8d:6b:f4:e2:c7:b9:25:d8:c5:5d:49:2d:36:
09:0c:1d:0e:c7:73:55:f2:d3:a4:e2:13:e2:20:7e:95:34:5b:
5a:0b:d7:d2:88:0a:05:ee:3d:86:97:80:ea:9a:96:d5:ec:3c:
17:73:72:e0:f9:8a:73:58:54:c0:f7:01:82:5a:a9:71:b5:3b:
48:55:82:14:af:5f:4a:56:05:1b:b6:62:1b:05:54:41:c0:de:
83:a2:bd:6b:2f:39:44:a5:90:d2:bf:68:5b:4c:0a:43:19:16:
75:b0:ac:e6:d4:5b:38:ca:9a:3b:d7:0b:41:a6:82:58:db:e2:
ac:aa:99:6b:e2:4c:5f:db:a9:d6:f0:91:4d:50:15:85:ba:99:
dc:a4:0f:50:eb:4b:d3:c0:24:77:80:ba:93:f3:40:6e:06:d7:
4b:71:f1:2f:df:61:e4:ec:7a:57:79:3c:e1:f5:4f:58:01:db:
95:7c:c5:4f:f9:e4:9e:17:a9:cd:32:43:66:8e:22:10:57:b1:
11:75:cb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:02:52 2024 by rpki-client on console-ams.rpki-client.org