Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OPTCXh3yYxfO-ePKcgBfH3vR2vY.cer
File: OPTCXh3yYxfO-ePKcgBfH3vR2vY.cer (raw, json)
Hash identifier: fosaZhUNxfbMAtqusn4YbdWXnbkf/J/aTXsaLMOJna4=
Subject key identifier: 38:F4:C2:5E:1D:F2:63:17:CE:F9:E3:CA:72:00:5F:1F:7B:D1:DA:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2964938527CF92D4A649D0B0727A06
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/3428e7-15f9-46b4-b979-519f983c72b5/1/OPTCXh3yYxfO-ePKcgBfH3vR2vY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/3428e7-15f9-46b4-b979-519f983c72b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207550
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:64:93:85:27:cf:92:d4:a6:49:d0:b0:72:7a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38f4c25e1df26317cef9e3ca72005f1f7bd1daf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:ec:e1:e5:d2:b7:53:7c:f9:fe:96:e0:48:
60:e6:3c:59:56:1a:a8:0c:a0:75:01:4d:1c:01:06:
d1:ba:e7:5d:52:f3:17:df:05:27:64:10:2f:57:ff:
b2:c4:ad:f5:a7:61:b2:00:c4:c0:98:bf:f7:92:30:
7c:b2:31:80:13:05:74:8f:d5:32:36:08:af:4e:e7:
b8:23:2c:d7:57:95:74:0b:a4:32:93:74:0e:72:ac:
70:cb:c8:b6:69:cb:8a:b9:f3:fc:13:88:96:3b:ee:
a5:38:c0:95:28:eb:8f:b5:f3:c4:78:9a:62:b7:54:
56:e4:5a:aa:de:38:26:43:7b:88:c3:14:fb:cd:e6:
5a:04:30:0b:ac:fb:6e:e4:29:42:5f:a2:d5:99:f8:
79:48:25:34:bf:20:1d:d4:12:c2:32:a6:84:3d:ea:
94:3f:da:26:14:37:e8:d4:67:38:54:32:0f:e7:16:
bb:bf:47:fd:9c:dc:14:0e:80:e3:eb:4f:4d:c2:fd:
b6:be:aa:44:bc:27:7e:79:e6:25:86:b5:16:38:09:
62:c8:98:87:3c:0f:e4:ca:dd:8e:3b:84:ff:d2:9c:
1c:41:57:a3:dd:c2:8c:b7:25:00:06:0c:56:45:d9:
4e:22:01:0e:e8:3e:14:2b:72:55:b1:8b:67:6a:cf:
2f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F4:C2:5E:1D:F2:63:17:CE:F9:E3:CA:72:00:5F:1F:7B:D1:DA:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3428e7-15f9-46b4-b979-519f983c72b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3428e7-15f9-46b4-b979-519f983c72b5/1/OPTCXh3yYxfO-ePKcgBfH3vR2vY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207550
Signature Algorithm: sha256WithRSAEncryption
0d:b5:6d:d2:33:03:82:5f:e1:aa:e4:8d:8c:96:5e:52:aa:16:
57:fe:02:c7:c5:5b:3c:e8:21:0a:21:3f:b0:bf:a8:56:f0:cf:
64:8b:d4:38:37:f9:d1:f7:54:e7:84:31:38:eb:dc:de:1f:4c:
b8:e4:cc:05:92:fb:81:a4:a0:58:4c:d5:df:94:05:2f:62:35:
12:8b:88:e3:c5:44:e3:25:84:75:ef:c4:08:26:4b:dc:1f:02:
6b:f4:f2:7d:71:8c:d8:54:10:8d:43:2e:1b:3c:b8:ba:d9:e6:
4b:d0:fa:83:95:4e:e6:90:b0:d3:cf:f7:b5:5b:ef:9a:33:24:
52:6d:94:92:7a:6c:fe:85:05:b3:d5:15:ae:a2:e4:1f:3b:77:
71:35:70:99:79:b5:29:b2:7b:0a:28:bb:d9:c6:74:8a:0c:95:
8e:11:39:bc:9c:cb:fb:d7:00:30:31:9e:c9:a5:46:bf:c4:71:
31:5a:17:9a:93:e2:97:0f:5e:58:80:f7:53:e6:8a:33:9d:d8:
02:80:6a:ec:23:1c:11:34:fd:7c:7a:46:c0:8c:4e:cc:7a:c2:
7c:c5:f1:d2:ed:7a:cd:47:08:b0:05:2a:a8:09:95:36:70:8b:
34:6d:c5:14:09:26:f6:b7:ed:f5:ef:4d:15:61:8f:17:0e:81:
02:2c:8a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:43:12 2024 by rpki-client on console-ams.rpki-client.org