Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
File: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer (raw, json)
Hash identifier: WB0IX4dE+s3eCXeOvmh8wfuEJoxS8xdhuOiAk55EmFQ=
Subject key identifier: 38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421443A6019E0BDDC1F24443CD722E387
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 5.253.76.0/22
IP: 2a09:53c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 06:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3a:60:19:e0:bd:dc:1f:24:44:3c:d7:22:e3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:09:c6:60:eb:17:6c:aa:10:b6:3f:e8:d5:
8a:92:df:f5:d2:d3:c5:38:1f:20:4f:61:89:3f:12:
03:a7:b9:1c:dc:cd:d7:e3:c2:de:f5:70:ed:65:b1:
8d:a7:5a:a8:28:bc:82:91:1f:96:cc:21:20:04:91:
9d:b2:e7:7f:4d:0a:b9:89:88:ad:60:fb:ab:79:ab:
03:42:98:66:ff:41:23:97:b4:b8:ff:f3:07:1d:9d:
63:b4:42:80:63:22:df:74:28:09:c5:f8:d6:f0:39:
41:db:d4:2d:df:2c:aa:c5:eb:68:95:df:d0:08:d5:
db:a9:80:36:cd:39:90:88:34:c9:6c:29:5c:69:82:
44:b1:9a:1c:b6:43:e9:f7:30:85:1b:b9:46:fc:80:
b0:04:6d:c3:36:f6:cc:13:b7:ed:ad:af:27:b9:d4:
dc:b1:3c:de:8e:4d:c2:33:bf:4f:8f:50:09:4b:6d:
58:f8:54:8f:4d:1f:b7:a8:b1:bc:a0:15:99:cd:c1:
dd:2d:a1:4d:76:63:e6:3e:8b:43:f6:c8:25:ed:2d:
a7:ed:68:55:1e:2a:34:de:cb:a0:7b:2e:88:4e:f4:
d5:c2:59:80:d1:4e:3f:9d:67:00:8e:94:9b:ea:71:
00:35:37:73:2c:cc:6d:d0:43:67:9d:0a:9c:0b:d3:
65:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.76.0/22
IPv6:
2a09:53c0::/29
Signature Algorithm: sha256WithRSAEncryption
66:9f:76:86:db:21:80:68:e1:85:b1:2b:fc:ac:10:c4:24:c2:
82:80:27:9f:02:b7:84:85:f2:eb:1f:f8:96:86:ec:44:09:12:
6e:e9:15:d3:42:4d:4e:de:85:72:c2:25:a1:56:bc:c4:db:bb:
df:fa:c6:fa:12:40:bf:9e:f3:d1:21:47:31:97:8d:39:dc:ee:
53:29:98:3d:c7:04:48:37:85:8d:62:c4:ff:42:b1:f0:aa:bd:
7e:3f:23:33:94:31:52:d7:a1:15:98:18:38:c4:5f:04:db:78:
19:0c:08:90:8d:5c:e7:98:5f:ec:26:37:33:99:54:7a:85:f8:
01:d6:9c:b3:ba:23:1a:23:79:6d:52:c5:f7:9c:7f:55:31:9f:
db:01:69:72:e0:e3:33:1d:4d:5c:bb:14:4e:e7:36:43:a4:3a:
84:a0:eb:61:02:06:5a:4d:e4:11:4c:3b:e0:ea:c1:f0:3c:3e:
2d:d9:7e:bf:b3:2c:cd:b1:7a:50:ba:39:fe:50:7e:d8:b8:f0:
db:13:0a:e6:40:9a:a9:e3:90:d6:e4:de:83:8a:ca:5d:7d:29:
05:0e:21:93:c8:85:5c:c6:66:32:d1:82:1d:22:47:b9:d7:5c:
00:b9:ef:c6:85:09:fb:22:40:3e:49:f3:4a:b4:9d:97:da:0a:
58:92:43:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:36:53 2025 by rpki-client