Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
File: oxkPbv156nMz-bzNhaBDUtkVsjk.cer (raw, json)
Hash identifier: aZnYFl86GcA/vh11mGegvC7gwESzddF6krZl8isOKJc=
Subject key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7271021C803133E275EE898A78A8623
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50343
AS: 207139
IP: 109.233.152.0/21
IP: 185.169.112.0/22
IP: 2a01:8780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:10:21:c8:03:13:3e:27:5e:e8:98:a7:8a:86:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:1b:21:2c:f7:82:d6:c0:28:9b:c1:b3:55:
27:1c:15:4d:48:c8:0c:55:c2:85:ac:65:9f:5f:ce:
78:9b:3e:7e:8b:45:ec:36:4a:48:27:07:c0:01:fb:
33:14:ec:70:b7:cc:f6:8b:9b:7a:b0:e9:35:ee:40:
22:28:a0:e8:36:d2:3a:50:8c:a1:f1:9f:dd:1b:76:
96:66:51:d5:36:38:6f:59:78:6e:84:0d:08:de:00:
d4:02:79:9d:86:a8:5c:07:bd:6c:f3:4f:af:35:f4:
c4:f0:95:f4:ca:df:7b:01:62:3b:93:e0:bb:87:97:
0d:7e:20:4d:86:d1:f5:bb:bc:fd:1b:9b:e3:f5:b3:
ff:06:fd:61:a7:ed:a6:e8:87:90:8f:2f:33:3b:98:
6f:42:0c:7f:7e:8d:ac:56:66:44:70:3f:fb:75:9f:
08:6b:ff:bb:24:50:6d:4c:c2:16:83:49:f1:ff:83:
62:c8:50:c6:9d:2c:3d:00:6e:b0:93:a8:67:1a:8c:
92:3b:72:3a:5c:67:72:2f:59:67:92:91:be:e5:9d:
f6:c2:ec:85:7b:28:9b:5e:99:b4:fc:51:4d:c5:a6:
96:fb:c4:61:be:4f:38:a5:04:34:47:b1:58:a8:15:
8a:38:71:66:11:47:da:58:46:8f:7c:84:6d:4d:f8:
f4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.152.0/21
185.169.112.0/22
IPv6:
2a01:8780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50343
207139
Signature Algorithm: sha256WithRSAEncryption
63:b4:3d:6c:a9:3a:f6:2d:dc:e9:94:86:a6:9b:f2:82:7e:59:
63:6a:be:98:24:27:b5:79:4a:bb:d1:e0:d7:dd:96:74:72:0d:
db:f8:99:79:b9:af:46:ee:7b:bc:d3:1d:22:14:ff:02:1d:cc:
2a:85:92:92:e8:0c:c5:58:9b:db:94:4a:6d:e2:1a:b6:a0:73:
6d:fb:d7:3b:d7:88:56:62:27:72:bc:dc:16:ef:7f:e2:35:a3:
55:4e:bf:66:c0:b0:21:6c:2f:2b:d7:26:36:e5:50:20:64:78:
8d:19:ed:9b:d5:60:c6:1d:34:18:aa:39:06:b5:7c:96:03:2a:
e5:fe:95:95:b0:bb:d5:28:b7:5c:61:b7:82:fc:e3:9b:c4:e9:
c2:29:de:ab:5e:e9:24:bd:b7:0a:a6:69:3d:f6:e3:89:53:5e:
d7:50:bd:05:e7:c7:09:02:20:d3:72:61:f4:5d:b1:c0:d0:0e:
a1:a2:e3:e1:75:9f:a9:1a:7f:25:19:ec:b6:ad:41:16:6a:ce:
8d:14:5e:25:25:57:9e:bd:8e:64:2e:4f:bb:97:04:46:c4:91:
d8:ca:d9:fb:d5:5d:aa:1a:f5:b1:ed:c9:be:b2:44:ad:81:b4:
9d:c7:93:79:ce:42:cc:5c:cc:7b:45:97:61:e0:bb:4c:67:c3:
52:af:4e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:43:19 2024 by rpki-client on console-fra.rpki-client.org