Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OEkzYd9_OKtVdNuCIKbE_lz-a0A.cer
File: OEkzYd9_OKtVdNuCIKbE_lz-a0A.cer (raw, json)
Hash identifier: fyMeucnh6lPv2fOGpqycrow14w9YVr+twZTh/SyaCsA=
Subject key identifier: 38:49:33:61:DF:7F:38:AB:55:74:DB:82:20:A6:C4:FE:5C:FE:6B:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E1E6810F39E6403C45ECBE6E0BC052C94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/2fad84-e8c9-4f13-b6c1-4e6f26dd3ddb/1/OEkzYd9_OKtVdNuCIKbE_lz-a0A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/2fad84-e8c9-4f13-b6c1-4e6f26dd3ddb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 08 Mar 2024 14:12:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215345
IP: 2001:67c:88::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1e:68:10:f3:9e:64:03:c4:5e:cb:e6:e0:bc:05:2c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 8 14:12:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38493361df7f38ab5574db8220a6c4fe5cfe6b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:25:ff:98:c3:2d:82:40:35:d4:f7:fc:84:1f:
81:44:dd:9d:6e:b9:02:e9:eb:ea:84:02:50:6d:bf:
f2:8c:bd:85:de:c4:ec:8b:5f:80:0d:0a:11:e1:cd:
64:c0:d8:68:e4:d2:41:dd:21:af:d0:52:c6:88:ae:
a6:fe:09:0d:b1:7a:f6:7b:25:e1:8b:b1:1c:46:5c:
72:19:b9:77:59:aa:22:96:b6:c3:81:71:a7:37:9e:
48:57:81:2d:8f:90:89:10:38:06:36:a1:f6:99:4a:
ca:be:da:03:50:d2:77:78:1e:d8:62:06:0a:a1:f1:
39:56:11:5d:79:4c:11:7a:62:0e:2c:3d:e0:0a:39:
34:7d:2c:4b:14:4f:75:38:13:e3:4d:1f:87:23:1c:
9f:af:0a:52:27:59:fd:c3:62:c2:64:e3:f7:d7:06:
55:b9:4b:09:58:22:48:05:06:5e:c5:ee:d3:0a:f5:
3d:18:6e:ef:fa:f8:44:06:91:5d:65:09:84:4e:e6:
11:50:04:b9:a5:73:20:98:86:cc:0d:60:35:98:de:
e5:e9:fd:cf:57:60:f7:e9:c3:15:5c:51:35:d2:7b:
39:b8:47:db:b6:18:fa:63:eb:3c:c2:86:24:dc:cd:
6d:f3:72:f1:77:95:c8:02:24:65:2e:03:b7:ab:76:
cc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:49:33:61:DF:7F:38:AB:55:74:DB:82:20:A6:C4:FE:5C:FE:6B:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2fad84-e8c9-4f13-b6c1-4e6f26dd3ddb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2fad84-e8c9-4f13-b6c1-4e6f26dd3ddb/1/OEkzYd9_OKtVdNuCIKbE_lz-a0A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:88::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215345
Signature Algorithm: sha256WithRSAEncryption
22:19:44:f6:4d:59:f6:20:ee:eb:b1:66:90:c4:05:cd:e2:ee:
c0:b1:fa:be:d6:46:b4:26:b0:f6:71:89:bc:75:a1:f2:5f:74:
fd:c4:f2:01:99:8e:3d:1c:2b:14:5e:aa:ee:f0:fd:9c:f9:76:
ec:b8:2e:d0:f9:19:ad:5e:96:96:eb:33:13:fb:ea:0f:76:18:
e2:bc:f7:59:84:e3:b6:c1:b6:82:c7:61:11:e1:83:e7:1e:4f:
af:7d:71:4d:ed:53:13:f3:30:d2:68:41:e4:b1:90:6d:6e:d1:
7a:36:d7:97:43:03:d5:37:4b:7b:ab:9f:4e:8f:73:21:ef:73:
b6:fa:cc:a7:dd:b1:c9:39:16:a6:70:f0:28:de:73:39:80:81:
69:62:1d:b1:cf:aa:80:1b:be:ec:23:21:bc:55:e0:c8:98:b1:
f7:41:e3:63:cb:79:a9:2c:56:f8:6e:2c:05:b7:bf:22:34:1a:
c4:06:c8:eb:b3:9e:5a:f1:89:93:1c:1b:e4:90:6b:b9:1f:bd:
2d:c5:d7:3f:72:d4:93:99:d8:83:39:b2:bb:61:d6:ff:3c:65:
59:a9:d2:e2:99:23:e8:75:c6:95:e2:91:86:ba:2f:05:66:86:
c3:43:e4:e1:c4:5b:ee:2c:e2:ae:3f:85:0f:f3:86:c9:e1:04:
f8:ab:b4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:05:15 2024 by rpki-client on console-ams.rpki-client.org