Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
File: qOdYAufvuGU-OvWcvxvAZTi8pnE.cer (raw, json)
Hash identifier: ApblQhXfDQ/YJjpYH9s9R4tcRgCvuE35+5KH7VFmjNY=
Subject key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2BE66EF956876D198580F23AD596A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:35:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212866
IP: 185.111.252.0/22
IP: 2a06:60c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:e6:6e:f9:56:87:6d:19:85:80:f2:3a:d5:96:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:35:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:9f:e2:fd:06:64:67:31:48:01:73:57:bf:
79:f5:6f:f1:83:f7:11:88:98:d0:1e:c0:c1:e8:b9:
1e:31:e9:d9:5e:b9:73:22:f7:83:8e:fb:a4:58:ff:
8c:ef:3f:1a:6e:e6:d7:f7:12:8b:fb:b3:1e:20:f9:
b5:fa:dc:43:6d:56:56:07:50:e1:56:75:f6:5e:8d:
c2:0c:7b:06:26:15:24:d9:48:9f:46:92:83:e0:45:
14:a7:f0:2d:49:36:d6:78:7c:f3:bc:16:0a:cf:82:
86:ee:92:46:fc:64:1b:18:b6:19:2b:69:05:6b:3c:
56:b4:d2:50:cf:9f:fa:e7:fb:9a:45:40:81:82:7b:
da:0e:03:e2:25:77:b1:cf:75:b8:1f:26:17:66:47:
4d:78:45:be:a6:cc:f6:7c:d3:79:8a:ae:86:d7:d5:
1f:10:77:c7:65:6b:0e:e2:e4:d2:e9:7a:69:1d:39:
e5:83:9e:2a:f4:c0:de:30:46:d1:88:01:c4:ed:4f:
40:dd:63:c5:bd:48:42:b3:b3:b7:51:72:2b:45:7b:
ba:7e:09:a3:cb:10:e8:20:76:e4:2b:ed:04:d5:8b:
d3:05:1f:4d:d7:03:62:1a:f6:99:ac:79:49:49:7b:
f6:03:ce:1e:bb:33:dc:30:42:52:96:b0:1b:8b:0b:
bd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.252.0/22
IPv6:
2a06:60c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212866
Signature Algorithm: sha256WithRSAEncryption
19:e9:d6:a9:21:a5:77:44:7f:b6:b0:5d:d8:69:60:34:a2:6b:
17:d5:22:4e:25:de:fb:44:4d:4a:f1:e9:fe:70:44:8e:46:26:
16:fa:49:bb:02:3d:d9:c8:86:49:fd:fc:5a:2c:61:11:07:f5:
93:05:42:dc:23:08:95:55:31:e4:a5:9b:9a:e3:16:3f:51:6b:
d4:5e:c5:0d:51:c1:bd:4a:b7:4c:90:00:8c:06:ce:b6:ee:5f:
e7:4e:33:ac:dc:a1:97:2c:22:0a:fa:52:40:c9:89:e5:68:36:
13:88:be:e0:2e:d0:a2:5b:e7:aa:fc:be:3a:e2:3a:b4:5a:dc:
a4:d0:cc:8b:2f:0a:ae:ff:73:3d:5d:33:d6:80:03:17:47:42:
d7:1f:98:5f:16:4a:d9:2f:ea:22:f3:3b:00:a0:2f:df:e0:70:
b5:df:f7:3d:7b:4f:f9:ad:a3:d1:ea:20:a8:6f:cf:51:64:84:
5b:6d:c5:cc:06:96:fb:e0:3b:6f:68:65:c0:32:a4:52:bc:fe:
9d:27:31:6a:98:1e:b0:9d:93:47:f0:f4:73:60:66:3e:18:8c:
7e:6e:3a:d6:25:c5:1f:f8:a6:c5:51:71:75:44:25:b4:cc:cc:
18:22:2d:ec:f0:5f:ed:df:49:d4:27:1c:7b:4c:28:03:dd:f7:
57:4c:e5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:44:40 2024 by rpki-client on console-fra.rpki-client.org