Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
File: OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer (raw, json)
Hash identifier: u4yPTsoTh6nO01O8tv9MfkDaWzM1zEprUQ8WlLBQ7lc=
Subject key identifier: 38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A74CCCF788B543DF9CBC7E4EF7D6E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.88.192.0/22
IP: 2a07:aec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:74:cc:cf:78:8b:54:3d:f9:cb:c7:e4:ef:7d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:ce:e6:17:45:ce:06:c9:cf:23:49:b3:01:
56:2b:cd:5d:b8:4d:3b:69:ae:39:86:c6:55:d6:3b:
95:ac:58:22:d3:d2:ea:63:57:ce:6b:1c:bb:6b:f9:
2a:f3:d0:60:62:87:e7:6d:64:ad:48:4a:0b:86:4c:
c5:aa:0a:e1:0a:e6:75:15:b7:64:fb:c7:14:c7:c4:
1e:ee:4c:1a:b8:72:34:43:c0:fc:c9:bc:90:bb:4f:
3e:77:00:e7:a6:58:e9:74:97:42:a9:2f:a6:d3:9d:
2d:a9:15:6f:81:8a:0c:1d:62:cd:01:db:b3:82:cd:
5d:1c:53:87:16:c3:4e:a4:c2:d3:8a:b8:37:74:8a:
34:05:c2:94:75:eb:4e:08:c2:5f:7b:ef:0a:eb:10:
d4:f3:87:68:bd:58:78:0d:62:82:fa:9f:03:57:0e:
91:d9:54:af:90:bf:b6:1a:06:b9:2e:61:4b:54:51:
ab:93:00:e8:25:06:5b:9b:d8:2f:69:3a:1a:5d:11:
85:b5:86:3e:75:0d:41:28:b3:fe:82:65:c9:25:b5:
a8:0c:cf:10:01:36:c5:9d:9f:b2:ef:1f:66:91:e3:
55:84:f5:ad:22:17:48:66:3a:70:21:1c:55:41:4a:
07:19:7f:93:9b:92:28:60:d9:50:b9:21:83:a6:7d:
c7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.192.0/22
IPv6:
2a07:aec0::/29
Signature Algorithm: sha256WithRSAEncryption
83:e7:e6:05:71:98:19:e5:66:b6:64:da:3c:7b:fc:64:ef:82:
b6:67:7d:9e:54:d3:b7:55:5e:15:b5:25:3e:7d:53:7b:93:17:
1d:35:8a:f2:07:06:cb:b4:a3:83:c4:11:d9:ea:20:8e:27:39:
7c:c1:18:54:ba:ee:92:34:9f:a2:12:07:a1:cd:47:ee:f6:d7:
c2:db:70:81:fe:92:9e:26:49:0e:3d:80:a8:0b:34:15:e9:c8:
c3:a8:60:31:4e:3a:b4:23:2a:8b:c0:12:05:e0:9b:d3:7c:2f:
6f:f5:e5:01:e4:76:9a:3c:60:38:fb:a1:6c:55:79:90:36:45:
b7:07:c4:22:2e:93:03:65:c1:65:d8:d9:9f:45:13:15:3d:3d:
fa:6f:a2:69:ac:da:c9:72:67:b7:13:98:0d:f3:6a:f2:36:3c:
a9:79:fc:54:7a:1f:7f:57:42:77:b1:b5:16:17:ef:4b:40:1b:
cb:0e:c0:4b:88:40:22:ca:f3:02:49:f7:ed:8c:6b:d9:a6:13:
37:02:6b:43:27:64:7b:24:ab:f7:8c:87:55:2f:81:9c:3a:09:
a3:3a:db:9a:57:60:34:f0:d8:04:b6:0f:08:0e:f8:3d:a8:2a:
d7:79:87:bf:2b:d1:e4:8f:12:a8:67:84:cb:5e:5b:f8:00:ea:
a9:cd:f4:a1
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzKKnTMz3iLVD35y8fk731uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzMzQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGJkNmQ4ZWJiODI0MDRkNTcwOTM1MWJjMjMyOWEwZWU0M2E5YTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjTO5hdFzgbJzyNJswFWK81duE07
aa45hsZV1juVrFgi09LqY1fOaxy7a/kq89BgYofnbWStSEoLhkzFqgrhCuZ1Fbdk
+8cUx8Qe7kwauHI0Q8D8ybyQu08+dwDnpljpdJdCqS+m050tqRVvgYoMHWLNAduz
gs1dHFOHFsNOpMLTirg3dIo0BcKUdetOCMJfe+8K6xDU84dovVh4DWKC+p8DVw6R
2VSvkL+2Gga5LmFLVFGrkwDoJQZbm9gvaToaXRGFtYY+dQ1BKLP+gmXJJbWoDM8Q
ATbFnZ+y7x9mkeNVhPWtIhdIZjpwIRxVQUoHGX+Tm5IoYNlQuSGDpn3HzwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFDi9bY67gkBNVwk1G8Iymg7kOppDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwL2JiM2I0
OS02MmQwLTQ5N2MtYmQxZS04Yzk1MzlmNDQ0YzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvYmIzYjQ5
LTYyZDAtNDk3Yy1iZDFlLThjOTUzOWY0NDRjNi8xL09MMXRqcnVDUUUxWENUVWJ3
akthRHVRNm1rTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLVjAMA0EAgACMAcDBQMqB67AMA0GCSqGSIb3
DQEBCwUAA4IBAQCD5+YFcZgZ5Wa2ZNo8e/xk74K2Z32eVNO3VV4VtSU+fVN7kxcd
NYryBwbLtKODxBHZ6iCOJzl8wRhUuu6SNJ+iEgehzUfu9tfC23CB/pKeJkkOPYCo
CzQV6cjDqGAxTjq0IyqLwBIF4JvTfC9v9eUB5HaaPGA4+6FsVXmQNkW3B8QiLpMD
ZcFl2NmfRRMVPT36b6JprNrJcme3E5gN82ryNjypefxUeh9/V0J3sbUWF+9LQBvL
DsBLiEAiyvMCSfftjGvZphM3AmtDJ2R7JKv3jIdVL4GcOgmjOtuaV2A08NgEtg8I
Dvg9qCrXeYe/K9HkjxKoZ4TLXlv4AOqpzfSh
-----END CERTIFICATE-----
Generated at Fri May 3 11:30:45 2024 by rpki-client on console-ams.rpki-client.org