Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
File: o6VWBFl7BrDqzoivsakP_5N9l-o.cer (raw, json)
Hash identifier: qA2r3XyVa2FXBVf4V7JTLTx/TkS+SYVyCL2A9kreE0o=
Subject key identifier: A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C73F7BE330C1C8EF9F8C2E1BA6A91
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.132.88.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:73:f7:be:33:0c:1c:8e:f9:f8:c2:e1:ba:6a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:42:2c:1e:92:d4:64:bc:5e:e3:23:c6:0a:af:
ab:0e:d1:b5:c2:1f:8c:5f:81:fd:f6:69:68:ef:79:
ce:05:7b:56:74:1c:41:54:85:6e:e1:0e:5f:09:4a:
b3:90:6c:a7:ed:b8:6b:c1:69:89:2a:22:82:03:a3:
b1:ca:39:da:3c:8e:46:ce:2b:63:27:21:50:5b:c9:
4b:32:47:47:d0:ad:ec:6f:98:e7:05:82:e7:27:02:
54:8e:81:0f:48:21:0b:f4:c2:29:6d:67:58:13:5a:
a3:e7:07:d1:1f:ad:87:ef:a6:65:c8:b7:c0:ba:72:
97:03:2a:cb:5a:44:33:ae:de:40:3e:d8:94:65:ee:
3e:13:2b:ce:ae:b5:5c:12:8c:0d:95:08:63:3f:2b:
17:c4:8c:de:e8:84:fa:61:9c:2f:d7:15:3d:7e:58:
c9:c8:34:83:f0:e3:7b:6d:4f:8b:17:24:fe:d0:fb:
62:f3:93:32:7c:48:ef:3a:76:5a:e2:2f:44:9a:b8:
25:ba:00:b5:0b:55:f5:a7:14:0c:02:e8:b9:4a:05:
ed:05:84:ce:de:4a:45:53:09:80:42:f5:6f:fe:33:
c1:a7:33:d7:7d:d2:86:71:e4:75:ba:9e:62:ca:d0:
42:30:5e:66:2e:40:ba:c7:0f:74:ef:50:ba:8c:28:
07:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.88.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:8f:4f:3e:04:b9:5e:48:54:e0:d3:c4:ab:b8:cb:c0:cf:33:
f9:2e:2c:15:f8:39:ce:79:41:37:b6:e1:ae:9a:be:20:4c:ee:
67:59:30:9e:49:78:ca:a0:ba:88:78:de:96:50:51:28:60:4c:
29:ba:cc:28:a0:cd:57:ca:4b:4b:ac:25:2a:87:21:b7:c1:0d:
08:f8:da:db:13:a1:e6:fd:53:61:b5:34:94:6d:ad:48:56:8d:
f9:09:01:9a:4e:f9:b9:d3:1f:57:af:0f:e8:d4:3d:4e:9c:a7:
9d:ed:a3:dc:73:82:81:25:52:d5:db:69:34:e5:09:56:bf:e3:
a5:2d:38:4c:8b:37:76:09:cb:f0:02:80:e1:47:43:44:87:95:
c1:37:c5:17:05:c4:b4:a1:1a:b4:9d:c6:71:f4:61:0d:41:c1:
64:a9:81:f1:fd:a9:81:69:69:1f:60:97:f8:6e:42:1a:13:9f:
9f:52:c1:67:67:d9:91:ad:2e:48:08:cf:43:eb:35:bf:f4:da:
58:d2:c9:a6:74:0e:8d:d4:76:fc:a9:d1:05:fb:f1:10:a6:31:
e8:c5:0a:13:a6:6e:b5:c4:25:58:71:75:cb:ff:02:75:83:33:
71:e1:29:a7:86:48:a8:2c:57:ed:0b:1d:e1:37:68:8d:a4:fd:
1f:f0:06:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:10:58 2025 by rpki-client