Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OFYFj7mk9--XizgCGuFSwk6_zkA.cer
File: OFYFj7mk9--XizgCGuFSwk6_zkA.cer (raw, json)
Hash identifier: wzJAl2Sr/FerXwynsu7e0E+TU/B3B+WpPIYwUAZJxCM=
Subject key identifier: 38:56:05:8F:B9:A4:F7:EF:97:8B:38:02:1A:E1:52:C2:4E:BF:CE:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019276D8370BC0D7008C1651B15804399DC7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 10 Oct 2024 14:32:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.182.84.0/22
IP: 2a0a:e980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:76:d8:37:0b:c0:d7:00:8c:16:51:b1:58:04:39:9d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 10 14:32:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3856058fb9a4f7ef978b38021ae152c24ebfce40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:78:ed:bf:0f:17:f7:2d:ed:b2:ac:24:02:
a6:d4:62:dc:80:7e:96:29:cf:8c:05:74:27:93:39:
31:91:c7:1a:cd:c9:38:86:0f:d8:47:40:91:9f:c2:
b8:4c:45:79:98:57:34:30:8f:c8:8d:15:f2:17:14:
56:3c:54:57:e6:af:72:bb:1c:ac:2c:35:20:41:35:
f7:be:35:66:a3:28:a1:35:80:33:db:63:fa:54:03:
f5:27:4b:d5:29:be:90:6d:d1:a5:22:d6:6b:d5:d1:
b1:9e:dc:05:f6:f5:67:a5:5a:1e:88:79:8b:7a:63:
d4:00:fa:c5:05:2f:c5:19:95:e2:3c:30:f9:a1:46:
bc:98:f1:48:08:85:49:f8:85:31:04:7c:f7:8f:ea:
07:f2:88:7c:f2:5d:19:38:3a:54:e3:b0:84:c0:45:
ea:ee:f9:b6:fc:99:bb:a6:33:cb:e2:6d:41:c4:62:
70:02:22:3d:b1:3b:b8:65:96:47:17:8a:1a:8c:43:
18:d0:73:98:0f:ec:ec:57:4d:47:db:6c:e6:80:46:
37:07:ff:18:a6:0d:95:d4:bd:69:56:de:5d:a5:75:
09:74:58:48:ee:df:7d:3b:c6:f3:20:09:c5:33:5c:
d4:b9:16:59:9b:a7:6f:ff:e5:31:a8:53:b3:e4:e3:
51:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:56:05:8F:B9:A4:F7:EF:97:8B:38:02:1A:E1:52:C2:4E:BF:CE:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.84.0/22
IPv6:
2a0a:e980::/29
Signature Algorithm: sha256WithRSAEncryption
13:9b:3e:43:2a:1b:6d:87:e7:3b:e8:67:06:fb:26:40:72:b5:
5b:e3:39:b2:45:c6:3d:cd:a9:62:79:49:90:01:63:d7:be:9b:
7d:8a:81:f7:6c:e4:e6:21:db:50:d5:a9:dd:7b:21:40:21:b3:
e9:2a:60:c0:52:e2:1c:03:bd:6d:31:e3:8d:a4:ab:7c:9a:f7:
53:0b:49:3a:7f:ae:ab:20:a1:28:68:1e:90:bd:49:bd:01:e9:
b3:62:f5:8b:7e:8d:53:ae:ad:71:06:ed:6e:ac:65:59:6a:92:
2e:cd:18:36:41:99:44:39:9c:5e:d9:c6:fa:b0:eb:7f:99:b2:
bd:d5:cb:16:23:01:f9:ce:d0:b5:60:09:43:f5:5c:a9:2b:23:
03:61:e8:d9:72:f6:00:41:4d:e8:1a:96:2c:4a:51:c7:fc:df:
81:d6:1b:6f:61:59:89:aa:5c:e5:d9:b3:04:15:23:9c:14:08:
20:cf:57:87:74:73:6f:2f:59:4c:eb:51:db:2f:e2:76:7b:72:
98:72:8a:2a:22:63:f7:a7:ed:3d:69:0a:2c:bf:0c:86:3d:cd:
11:8b:75:63:84:ea:b4:d5:6d:8b:94:06:b5:5b:fe:af:b6:02:
80:1e:63:25:39:06:75:11:32:3a:db:8b:5a:33:a6:15:4a:ce:
de:72:f4:ae
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZJ22DcLwNcAjBZRsVgEOZ3HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMDEwMTQzMjE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODU2MDU4ZmI5YTRmN2VmOTc4YjM4MDIxYWUxNTJjMjRlYmZjZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8R47b8PF/ct7bKsJAKm1GLcgH6W
Kc+MBXQnkzkxkccazck4hg/YR0CRn8K4TEV5mFc0MI/IjRXyFxRWPFRX5q9yuxys
LDUgQTX3vjVmoyihNYAz22P6VAP1J0vVKb6QbdGlItZr1dGxntwF9vVnpVoeiHmL
emPUAPrFBS/FGZXiPDD5oUa8mPFICIVJ+IUxBHz3j+oH8oh88l0ZODpU47CEwEXq
7vm2/Jm7pjPL4m1BxGJwAiI9sTu4ZZZHF4oajEMY0HOYD+zsV01H22zmgEY3B/8Y
pg2V1L1pVt5dpXUJdFhI7t99O8bzIAnFM1zUuRZZm6dv/+UxqFOz5ONRMQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFDhWBY+5pPfvl4s4AhrhUsJOv85AMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1LzIwOTRi
MC01YTU3LTRhMzYtYjVmYi1hNWZmMTc2ZDYxZDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvMjA5NGIw
LTVhNTctNGEzNi1iNWZiLWE1ZmYxNzZkNjFkMC8xL09GWUZqN21rOS0tWGl6Z0NH
dUZTd2s2X3prQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCubZUMA0EAgACMAcDBQMqCumAMA0GCSqGSIb3
DQEBCwUAA4IBAQATmz5DKhtth+c76GcG+yZAcrVb4zmyRcY9zalieUmQAWPXvpt9
ioH3bOTmIdtQ1andeyFAIbPpKmDAUuIcA71tMeONpKt8mvdTC0k6f66rIKEoaB6Q
vUm9AemzYvWLfo1Trq1xBu1urGVZapIuzRg2QZlEOZxe2cb6sOt/mbK91csWIwH5
ztC1YAlD9VypKyMDYejZcvYAQU3oGpYsSlHH/N+B1htvYVmJqlzl2bMEFSOcFAgg
z1eHdHNvL1lM61HbL+J2e3KYcooqImP3p+09aQosvwyGPc0Ri3VjhOq01W2LlAa1
W/6vtgKAHmMlOQZ1ETI624taM6YVSs7ecvSu
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:30:46 2024 by rpki-client on console-fra.rpki-client.org