Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OYNX5Wnx1MA9JqdjbgDTareWpwM.cer
File: OYNX5Wnx1MA9JqdjbgDTareWpwM.cer (raw, json)
Hash identifier: E2xN63E2PTgRYT2dWPGN+hq7wECIrx03KcipNHR/wBA=
Subject key identifier: 39:83:57:E5:69:F1:D4:C0:3D:26:A7:63:6E:00:D3:6A:B7:96:A7:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5EDAAC44BCA3AD5B1439252611B42
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://oto.wakuwaku.ne.jp/pki/simple/0/398357E569F1D4C03D26A7636E00D36AB796A703.mft
caRepository: rsync://oto.wakuwaku.ne.jp/pki/simple/0/
Notify URL: https://oto.wakuwaku.ne.jp/pki/oshirase.xml
Certificate not before: Wed 01 Jan 2025 07:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44937
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ed:aa:c4:4b:ca:3a:d5:b1:43:92:52:61:1b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=398357e569f1d4c03d26a7636e00d36ab796a703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:c7:86:7c:06:a9:1f:f0:10:6a:6c:b3:e7:
c4:42:d2:90:c0:ab:08:69:64:11:f8:45:7b:c9:4f:
5a:a2:e9:68:4a:11:9b:2e:96:bd:0d:b5:d6:44:7e:
93:4c:b8:eb:5b:54:e4:6c:e2:7e:d4:0d:7d:9d:49:
8d:33:51:95:94:16:74:6f:ae:32:39:40:27:01:97:
d5:13:75:c4:1c:03:69:2a:a9:22:c0:4a:84:54:4a:
77:2b:56:ee:6c:33:7b:76:23:82:53:6a:93:4d:ca:
88:74:63:4e:9d:69:c7:bf:33:03:4b:7b:9c:5e:43:
18:14:a9:ab:46:51:24:5e:2a:03:40:67:67:8a:f1:
7e:e6:8b:9d:9c:44:7b:02:f5:e2:ae:0b:ff:25:85:
ae:de:cc:63:65:70:46:7e:52:ea:cd:e8:51:45:a5:
17:69:21:59:c2:3f:f4:5d:b7:04:c5:15:f8:66:15:
c4:68:34:99:f6:d0:84:c1:f5:c3:32:ab:c4:64:a5:
0c:a7:a9:e1:ad:0e:e2:5d:06:6c:25:76:ee:1e:00:
bb:5a:1b:62:fd:aa:0e:fa:8e:89:3b:e2:cf:14:83:
73:c2:56:ae:38:cf:2c:77:de:84:e8:05:2e:94:07:
e9:4b:77:2d:30:f4:05:af:57:05:13:dc:ae:b9:b3:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:83:57:E5:69:F1:D4:C0:3D:26:A7:63:6E:00:D3:6A:B7:96:A7:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://oto.wakuwaku.ne.jp/pki/simple/0/
RPKI Manifest - URI:rsync://oto.wakuwaku.ne.jp/pki/simple/0/398357E569F1D4C03D26A7636E00D36AB796A703.mft
RPKI Notify - URI:https://oto.wakuwaku.ne.jp/pki/oshirase.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44937
Signature Algorithm: sha256WithRSAEncryption
21:c6:ed:53:89:e8:f6:05:27:ad:f9:be:64:30:c7:ac:b7:12:
61:65:77:91:b0:cc:c1:20:1b:fc:7e:18:f0:92:96:fa:b9:59:
8b:ad:a9:96:43:67:4f:56:42:09:eb:c4:c3:fb:ad:3f:7a:0c:
ca:34:d3:94:7f:cc:1d:0a:82:b5:cd:c3:e8:83:74:ba:75:0f:
3d:f5:1c:86:95:47:3f:94:8c:4a:4d:12:8c:e0:28:64:ed:59:
7e:74:93:f1:8e:65:b8:e7:91:c7:ba:8f:be:8f:af:05:fd:54:
ad:22:ba:9d:c2:14:b8:70:a0:49:70:0a:39:48:dc:6d:fc:5d:
7c:2a:9e:c4:93:44:1e:a4:df:4f:a0:5c:7c:1a:96:44:fb:34:
37:1a:89:2b:fa:80:14:e6:07:fd:b2:8e:3d:65:f0:35:ce:96:
55:ae:47:db:0c:13:06:be:ce:61:04:b2:88:a1:7a:96:68:d5:
f1:e1:02:ed:05:15:ba:a6:b2:11:1a:a2:43:1d:3c:8a:a3:4b:
43:6c:12:56:b8:d1:c1:ae:d9:cf:ef:f4:4d:c1:25:d5:97:e2:
7c:b5:4b:29:08:2c:62:b1:6a:e8:ee:32:1c:93:9f:5d:1f:82:
8a:51:3b:c4:80:75:c7:fd:93:19:06:21:6c:81:4c:2e:ea:ea:
97:55:be:63
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZQg1e2qxEvKOtWxQ5JSYRtCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTgzNTdlNTY5ZjFkNGMwM2QyNmE3NjM2ZTAwZDM2YWI3OTZhNzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQDHhnwGqR/wEGpss+fEQtKQwKsI
aWQR+EV7yU9aouloShGbLpa9DbXWRH6TTLjrW1TkbOJ+1A19nUmNM1GVlBZ0b64y
OUAnAZfVE3XEHANpKqkiwEqEVEp3K1bubDN7diOCU2qTTcqIdGNOnWnHvzMDS3uc
XkMYFKmrRlEkXioDQGdnivF+5oudnER7AvXirgv/JYWu3sxjZXBGflLqzehRRaUX
aSFZwj/0XbcExRX4ZhXEaDSZ9tCEwfXDMqvEZKUMp6nhrQ7iXQZsJXbuHgC7Whti
/aoO+o6JO+LPFINzwlauOM8sd96E6AUulAfpS3ctMPQFr1cFE9yuubPc1QIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFDmDV+Vp8dTAPSanY24A02q3lqcDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgeEGCCsGAQUFBwELBIHUMIHRMDQGCCsGAQUFBzAFhihyc3lu
YzovL290by53YWt1d2FrdS5uZS5qcC9wa2kvc2ltcGxlLzAvMGAGCCsGAQUFBzAK
hlRyc3luYzovL290by53YWt1d2FrdS5uZS5qcC9wa2kvc2ltcGxlLzAvMzk4MzU3
RTU2OUYxRDRDMDNEMjZBNzYzNkUwMEQzNkFCNzk2QTcwMy5tZnQwNwYIKwYBBQUH
MA2GK2h0dHBzOi8vb3RvLndha3V3YWt1Lm5lLmpwL3BraS9vc2hpcmFzZS54bWww
WQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAK+J
MA0GCSqGSIb3DQEBCwUAA4IBAQAhxu1Tiej2BSet+b5kMMestxJhZXeRsMzBIBv8
fhjwkpb6uVmLramWQ2dPVkIJ68TD+60/egzKNNOUf8wdCoK1zcPog3S6dQ899RyG
lUc/lIxKTRKM4Chk7Vl+dJPxjmW455HHuo++j68F/VStIrqdwhS4cKBJcAo5SNxt
/F18Kp7Ek0QepN9PoFx8GpZE+zQ3Gokr+oAU5gf9so49ZfA1zpZVrkfbDBMGvs5h
BLKIoXqWaNXx4QLtBRW6prIRGqJDHTyKo0tDbBJWuNHBrtnP7/RNwSXVl+J8tUsp
CCxisWro7jIck59dH4KKUTvEgHXH/ZMZBiFsgUwu6uqXVb5j
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:42 2025 by rpki-client