Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
File: O1T6YLMnoIA9yF6XCpt2pFFM614.cer (raw, json)
Hash identifier: FjNVFmyEIs74BB6dw75t4Paem4gSKFUUcqSo2cdpx5M=
Subject key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7953B9D070D9CC0810D2771E7CF9477
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206469
IP: 62.106.71.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:3b:9d:07:0d:9c:c0:81:0d:27:71:e7:cf:94:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:56:f5:0a:75:93:42:92:2a:e7:01:54:4c:54:
6c:33:53:cf:32:25:89:27:00:87:9d:7b:b7:eb:57:
73:fe:01:9b:3f:61:e6:5a:23:0d:50:63:ed:02:65:
73:5c:56:bb:c6:61:79:16:4c:de:81:00:be:a9:0e:
3a:7c:86:8b:13:84:1b:92:78:a7:12:25:36:2c:5b:
fe:5b:b6:fe:72:8e:58:6b:76:b5:73:d9:8e:35:07:
60:3c:49:1b:48:94:94:4f:66:34:5c:75:54:9e:f7:
61:f6:ca:12:3c:1a:64:d5:64:8c:32:ef:ec:af:1a:
19:a4:24:39:b9:40:b1:71:0a:70:9f:ea:53:73:ae:
0e:03:39:c8:fc:7a:0f:e4:81:91:f6:e6:e9:59:f3:
8c:a4:13:6c:25:4b:cc:2a:18:06:76:e3:06:36:25:
09:96:55:9f:35:fb:76:48:3e:18:49:1f:f9:f1:68:
83:b3:80:a5:01:3e:f5:4a:6b:8d:6d:a0:d2:c3:34:
10:28:37:b6:c5:31:03:0d:15:b3:ab:40:85:53:8b:
10:33:ad:1f:a7:49:aa:fa:4d:23:06:8c:12:61:83:
f1:17:1f:aa:db:7d:32:84:91:82:d9:a8:ff:9f:6a:
6a:a0:c9:0b:4b:fa:04:33:03:13:f1:b8:b3:0e:11:
24:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.71.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206469
Signature Algorithm: sha256WithRSAEncryption
02:34:b1:5b:b0:12:8e:61:8c:98:8c:86:e0:6a:77:b7:fe:a3:
67:10:86:b1:56:bd:49:8d:66:6f:1c:2a:b8:1a:2a:31:17:df:
e2:78:dc:75:5c:37:b0:2e:c1:32:be:2e:53:31:c7:a5:fe:5e:
fc:88:93:4b:62:bc:55:d4:a0:a5:3a:3b:78:2f:90:58:e5:26:
a1:40:1b:14:17:30:2d:18:3c:44:ee:7a:c1:e8:79:76:ee:79:
97:79:5c:f6:42:18:78:cd:83:28:c7:78:fa:8e:c4:4c:b4:6b:
22:17:eb:61:f9:48:a1:28:dd:81:81:71:b7:37:41:f7:6c:d2:
4d:c5:13:b0:04:8d:64:79:c6:cd:de:8e:83:36:3b:72:11:7e:
3e:3a:e0:46:ff:92:b9:7b:78:3b:2f:72:08:c6:a6:97:db:aa:
1a:32:b7:2d:91:13:75:50:c5:3a:f4:ec:67:00:e3:04:20:49:
fd:d7:43:d1:f8:af:e9:e0:1b:f9:41:3f:ad:2a:b0:4e:7d:b3:
79:d1:d0:ec:f1:b7:2a:c7:b3:f9:ba:73:9d:9c:ae:e6:f6:56:
a7:f4:c1:e2:78:e7:03:bd:f2:b1:12:63:f9:81:7b:3f:ff:4b:
c7:b1:43:53:ab:3f:5d:04:eb:ed:c0:38:5b:63:cc:5e:3a:d8:
40:74:5a:74
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzHlTudBw2cwIENJ3Hnz5R3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjU0ZmE2MGIzMjdhMDgwM2RjODVlOTcwYTliNzZhNDUxNGNlYjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlb1CnWTQpIq5wFUTFRsM1PPMiWJ
JwCHnXu361dz/gGbP2HmWiMNUGPtAmVzXFa7xmF5FkzegQC+qQ46fIaLE4Qbknin
EiU2LFv+W7b+co5Ya3a1c9mONQdgPEkbSJSUT2Y0XHVUnvdh9soSPBpk1WSMMu/s
rxoZpCQ5uUCxcQpwn+pTc64OAznI/HoP5IGR9ubpWfOMpBNsJUvMKhgGduMGNiUJ
llWfNft2SD4YSR/58WiDs4ClAT71SmuNbaDSwzQQKDe2xTEDDRWzq0CFU4sQM60f
p0mq+k0jBowSYYPxFx+q230yhJGC2aj/n2pqoMkLS/oEMwMT8bizDhEkEQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFDtU+mCzJ6CAPchelwqbdqRRTOteMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiL2Q0Yzg5
MS00YmMwLTRhM2UtODQ1Ny00NDI3NmY2MDQyMzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvZDRjODkx
LTRiYzAtNGEzZS04NDU3LTQ0Mjc2ZjYwNDIzMy8xL08xVDZZTE1ub0lBOXlGNlhD
cHQycEZGTTYxNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAPmpHMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMmhTANBgkqhkiG9w0BAQsFAAOCAQEAAjSxW7ASjmGMmIyG4Gp3t/6jZxCGsVa9
SY1mbxwquBoqMRff4njcdVw3sC7BMr4uUzHHpf5e/IiTS2K8VdSgpTo7eC+QWOUm
oUAbFBcwLRg8RO56weh5du55l3lc9kIYeM2DKMd4+o7ETLRrIhfrYflIoSjdgYFx
tzdB92zSTcUTsASNZHnGzd6OgzY7chF+PjrgRv+SuXt4Oy9yCMaml9uqGjK3LZET
dVDFOvTsZwDjBCBJ/ddD0fiv6eAb+UE/rSqwTn2zedHQ7PG3Ksez+bpznZyu5vZW
p/TB4njnA73ysRJj+YF7P/9Lx7FDU6s/XQTr7cA4W2PMXjrYQHRadA==
-----END CERTIFICATE-----
Generated at Fri May 3 13:41:47 2024 by rpki-client on console-ams.rpki-client.org