Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
File: oisfTQq0ODaycVOQgo2QdyzJ2No.cer (raw, json)
Hash identifier: TYmZSBwPt2piaeyl9ZGruUGtlZBUIJoewsFzKq27ebo=
Subject key identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F1605FBBC2FF60E98E1C4FFE3D1EE421D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 25 Apr 2024 16:10:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 28995
IP: 62.140.160.0/19
IP: 2a02:2670::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:16:05:fb:bc:2f:f6:0e:98:e1:c4:ff:e3:d1:ee:42:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 25 16:10:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:9a:78:04:bb:f8:16:fe:bd:2f:64:bb:e7:
ce:8f:18:4f:09:ea:de:15:3b:fc:44:77:07:23:c3:
a1:20:c0:ab:ad:41:49:51:95:e4:aa:0f:09:f0:4c:
22:c9:14:25:ff:4b:a0:94:b5:a8:fa:91:61:3a:7a:
68:75:a4:aa:a1:bb:9f:de:2f:c2:73:6e:37:38:ea:
73:92:64:89:01:b6:11:25:db:64:7a:0c:da:2f:1d:
27:2f:98:f4:73:ab:75:cf:c8:69:34:4c:83:07:0f:
90:99:c9:f9:9b:8e:96:2f:ab:7c:0a:6d:f1:dd:63:
89:b2:59:5a:46:02:02:5b:ad:70:2f:f4:6a:0e:52:
81:93:bb:a3:de:cf:8d:78:f0:95:c5:ee:9c:1e:42:
fb:6a:e1:e3:32:19:f1:f4:88:75:c6:f2:00:b7:64:
1e:52:24:4f:ca:ea:a6:62:9e:4d:77:07:19:6c:d7:
d7:3d:28:36:3c:fb:30:c8:0e:a9:7a:dc:92:cb:b2:
18:ee:d7:bd:84:e3:be:e0:e0:df:04:6f:a7:07:46:
30:dd:70:79:27:6a:a4:29:47:7a:af:eb:d6:ca:16:
40:13:2a:92:df:6f:77:4b:dc:cd:d2:de:64:db:82:
2a:4d:c7:9d:46:9a:14:51:e5:c9:52:1a:c4:bd:29:
6a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.140.160.0/19
IPv6:
2a02:2670::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28995
Signature Algorithm: sha256WithRSAEncryption
37:ee:cb:71:44:a9:39:58:0f:5c:94:25:94:f4:93:a7:83:71:
fc:35:84:e0:a6:30:58:2c:4d:0e:52:2a:2a:4f:62:09:f1:55:
3f:db:a5:0e:f2:e2:d4:28:de:4e:64:fe:fa:16:d1:e1:31:9b:
d3:6b:52:1c:a0:35:e3:ba:1b:5b:8c:39:20:6c:ae:ac:22:79:
01:c8:4a:fe:bc:50:45:62:8a:af:f8:0c:06:75:f2:95:3b:a8:
34:c7:1e:65:bc:a1:dc:94:d0:a4:6a:1a:cb:43:05:f0:87:0d:
ce:98:46:d8:4d:17:d2:74:21:28:eb:eb:36:3d:f1:46:5f:c5:
df:78:21:be:98:05:52:07:e9:e0:db:7a:09:82:ff:6d:97:50:
33:82:12:fe:fe:ce:bd:f2:16:16:7b:22:b3:f8:e5:8a:f9:7e:
aa:17:75:e6:32:c9:bd:7d:25:0a:6c:82:91:a3:b6:32:2f:05:
9e:1b:08:45:2f:64:f2:20:4a:c8:03:94:17:ea:0e:b0:29:49:
0d:f4:73:9c:48:91:ea:e1:97:74:c7:93:08:0c:95:42:b5:da:
95:c3:c4:09:42:2a:fa:6c:a1:e1:18:7e:ae:69:8c:0a:fa:1c:
37:55:79:0a:59:df:0a:92:8d:fb:5e:16:78:98:b1:e7:a3:f6:
38:3a:b0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 03:54:12 2024 by rpki-client on console-fra.rpki-client.org