Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
File: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer (raw, json)
Hash identifier: i6SYC5YD8KRpmSqB+a4DG3tHD8UstrvMH4R3lGGJ+Ws=
Subject key identifier: 38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72738EA019EC1E872FA1C6F31E0F912
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.253.76.0/22
IP: 2a09:53c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:38:ea:01:9e:c1:e8:72:fa:1c:6f:31:e0:f9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:09:c6:60:eb:17:6c:aa:10:b6:3f:e8:d5:
8a:92:df:f5:d2:d3:c5:38:1f:20:4f:61:89:3f:12:
03:a7:b9:1c:dc:cd:d7:e3:c2:de:f5:70:ed:65:b1:
8d:a7:5a:a8:28:bc:82:91:1f:96:cc:21:20:04:91:
9d:b2:e7:7f:4d:0a:b9:89:88:ad:60:fb:ab:79:ab:
03:42:98:66:ff:41:23:97:b4:b8:ff:f3:07:1d:9d:
63:b4:42:80:63:22:df:74:28:09:c5:f8:d6:f0:39:
41:db:d4:2d:df:2c:aa:c5:eb:68:95:df:d0:08:d5:
db:a9:80:36:cd:39:90:88:34:c9:6c:29:5c:69:82:
44:b1:9a:1c:b6:43:e9:f7:30:85:1b:b9:46:fc:80:
b0:04:6d:c3:36:f6:cc:13:b7:ed:ad:af:27:b9:d4:
dc:b1:3c:de:8e:4d:c2:33:bf:4f:8f:50:09:4b:6d:
58:f8:54:8f:4d:1f:b7:a8:b1:bc:a0:15:99:cd:c1:
dd:2d:a1:4d:76:63:e6:3e:8b:43:f6:c8:25:ed:2d:
a7:ed:68:55:1e:2a:34:de:cb:a0:7b:2e:88:4e:f4:
d5:c2:59:80:d1:4e:3f:9d:67:00:8e:94:9b:ea:71:
00:35:37:73:2c:cc:6d:d0:43:67:9d:0a:9c:0b:d3:
65:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.76.0/22
IPv6:
2a09:53c0::/29
Signature Algorithm: sha256WithRSAEncryption
62:c6:6d:cf:5c:18:b3:1d:b5:2a:d8:62:00:10:74:0d:50:2c:
33:05:9a:e8:87:09:1d:78:4a:9a:3b:87:69:f8:00:e0:a7:62:
e6:65:67:b2:06:8a:0e:1e:6d:68:6a:a2:34:50:df:f9:d0:33:
f2:c2:8d:28:78:21:24:0e:ef:62:ed:19:98:cc:05:48:bf:01:
64:ed:97:64:17:a6:47:79:93:8d:ba:40:7a:6a:0f:10:e0:63:
05:57:bf:2b:13:50:98:38:24:29:fe:0f:dc:3c:6b:5b:69:e5:
38:57:b6:07:0a:37:e7:57:f5:e9:d1:aa:aa:b2:14:96:da:41:
dc:73:10:ba:f9:df:31:6c:20:6b:1a:fd:9b:fa:b5:12:d1:62:
fd:1d:7b:f6:1d:21:c9:4f:a1:60:15:03:54:c3:a8:f3:73:59:
8b:29:b8:ca:7c:5e:6b:e9:e9:f9:51:76:94:c2:16:32:89:e2:
0f:4f:75:83:5c:1f:15:82:6a:47:af:41:39:f8:ca:44:3f:d3:
b8:59:23:30:5e:e1:e4:e8:0d:d0:3d:a3:50:44:01:43:33:20:
e8:87:9e:20:77:5b:04:1f:f8:5e:31:b3:7b:af:f6:05:9e:0e:
13:68:c7:eb:b9:ec:52:fd:d4:16:03:b7:eb:c9:97:26:d7:4f:
0c:29:e5:4b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzHJzjqAZ7B6HL6HG8x4PkSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIzMTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODIyN2E5NmZhNjRhZDk1MjQwZjBhZWUwYmQzNzQ2NDZjNmJiZWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7oJxmDrF2yqELY/6NWKkt/10tPF
OB8gT2GJPxIDp7kc3M3X48Le9XDtZbGNp1qoKLyCkR+WzCEgBJGdsud/TQq5iYit
YPureasDQphm/0Ejl7S4//MHHZ1jtEKAYyLfdCgJxfjW8DlB29Qt3yyqxetold/Q
CNXbqYA2zTmQiDTJbClcaYJEsZoctkPp9zCFG7lG/ICwBG3DNvbME7ftra8nudTc
sTzejk3CM79Pj1AJS21Y+FSPTR+3qLG8oBWZzcHdLaFNdmPmPotD9sgl7S2n7WhV
Hio03sugey6ITvTVwlmA0U4/nWcAjpSb6nEANTdzLMxt0ENnnQqcC9NlvQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFDgiepb6ZK2VJA8K7gvTdGRsa77iMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzFjZjlh
Yy0xMGQ0LTRhNWUtYTcwNi1kMWM5YmEwOGY1NTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMWNmOWFj
LTEwZDQtNGE1ZS1hNzA2LWQxYzliYTA4ZjU1OS8xL09DSjZsdnBrclpVa0R3cnVD
OU4wWkd4cnZ1SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCBf1MMA0EAgACMAcDBQMqCVPAMA0GCSqGSIb3
DQEBCwUAA4IBAQBixm3PXBizHbUq2GIAEHQNUCwzBZrohwkdeEqaO4dp+ADgp2Lm
ZWeyBooOHm1oaqI0UN/50DPywo0oeCEkDu9i7RmYzAVIvwFk7ZdkF6ZHeZONukB6
ag8Q4GMFV78rE1CYOCQp/g/cPGtbaeU4V7YHCjfnV/Xp0aqqshSW2kHccxC6+d8x
bCBrGv2b+rUS0WL9HXv2HSHJT6FgFQNUw6jzc1mLKbjKfF5r6en5UXaUwhYyieIP
T3WDXB8VgmpHr0E5+MpEP9O4WSMwXuHk6A3QPaNQRAFDMyDoh54gd1sEH/heMbN7
r/YFng4TaMfruexS/dQWA7fryZcm108MKeVL
-----END CERTIFICATE-----
Generated at Fri May 3 09:05:13 2024 by rpki-client on console-ams.rpki-client.org