Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
File: r2Okes26jsHNhdTXnzazW2mOX4k.cer (raw, json)
Hash identifier: GPTQmnKpx30ygXqxifbz+etBB5BGydurZO8ly53dvAI=
Subject key identifier: AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E375C006861D59A1476D73CFC3BAC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12700
IP: 31.131.32.0/21
IP: 91.202.240.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:37:5c:00:68:61:d5:9a:14:76:d7:3c:fc:3b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:45:31:76:96:39:08:5a:bf:3c:af:dd:4f:
7f:ec:e6:22:2b:88:96:7b:f1:cd:af:59:31:1a:06:
ab:fe:84:d5:51:d0:b6:c3:02:02:64:fe:a2:02:77:
e8:93:91:0b:57:c3:96:35:bd:ed:fe:7c:17:70:a0:
0a:dc:d4:6c:34:19:0f:25:f1:b6:d3:59:53:78:02:
d4:98:4d:99:b4:5d:cf:a2:47:f2:0c:31:fb:39:72:
63:f7:e8:36:ab:ef:01:a5:76:bb:5a:cf:c5:ad:ec:
4f:c0:3e:24:cf:c6:61:0d:72:89:f5:d6:ab:4b:dc:
06:54:49:06:54:f3:e5:94:79:49:00:06:9c:7a:52:
37:8d:be:11:e9:1e:f7:fa:c6:64:4e:16:cd:3d:93:
8c:4c:c0:01:0a:eb:b8:47:de:33:6d:6d:99:a1:2a:
03:80:9c:a4:8f:ba:97:94:1f:45:ab:47:b8:83:f2:
9e:7a:39:f0:f1:f0:e0:de:35:1b:8a:85:eb:80:30:
51:4e:b2:65:e4:82:ab:72:62:94:ea:c5:69:ea:c9:
91:21:fc:74:0f:b7:36:f4:6a:ae:84:1b:42:75:5e:
e4:6d:a1:67:d8:42:0e:b1:7f:65:66:a0:00:73:74:
86:1b:dd:93:f0:77:9e:ca:40:5d:39:dc:8a:a5:9b:
4c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.32.0/21
91.202.240.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12700
Signature Algorithm: sha256WithRSAEncryption
48:5a:d4:f5:45:b9:b2:27:fb:cd:5c:10:e7:08:93:51:1b:70:
42:6f:d6:54:ae:0c:3c:68:91:c4:5a:28:f2:b0:b1:5a:34:22:
a1:82:4f:aa:05:a2:6e:e2:1c:c9:9a:f3:56:05:84:eb:c1:77:
3d:8f:3b:d9:66:cc:15:31:b7:96:db:49:59:78:6d:b5:17:6f:
c5:52:1b:34:4d:42:b3:a6:64:50:74:2b:91:79:60:5b:7c:c3:
10:89:17:e6:a1:fd:a2:35:52:e4:54:65:ce:73:43:77:a8:c5:
77:3f:a5:0e:1c:6e:07:8f:9d:ed:f3:c9:e7:1a:5d:27:7a:da:
ed:3b:7f:ee:47:4a:55:ee:38:b6:f6:9e:d3:0b:1e:42:43:06:
d6:6a:df:fe:d2:ac:3c:0f:85:7e:4f:de:42:13:f7:91:c3:1f:
42:69:7c:c5:33:29:ef:a4:0c:b3:7c:a5:a3:03:9c:ba:8d:47:
6b:a1:4d:15:ba:b7:21:5e:52:a1:48:f1:73:17:ea:df:15:92:
98:47:b4:7c:fb:69:73:84:57:86:be:c4:22:30:c9:b5:ae:d5:
43:42:bd:d6:75:af:a8:43:de:71:c8:18:5a:1a:e2:7e:6a:37:
4b:f4:df:e9:fa:9b:8f:e4:fc:d7:0f:bd:0d:b1:b5:4a:ef:f6:
92:3f:4b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:31:11 2024 by rpki-client on console-ams.rpki-client.org