Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
File: OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer (raw, json)
Hash identifier: O0eLWkTqLJq66iOD4Web86evmC5JfAa6Uj5iP1R/+Jg=
Subject key identifier: 39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BE8A656AE257A09D2DA2AC5EF25BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 85.208.192.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e8:a6:56:ae:25:7a:09:d2:da:2a:c5:ef:25:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:b5:e6:ce:f3:3a:50:34:bb:6f:87:1c:82:
10:ca:e3:e4:e7:3d:9e:0c:52:ab:f3:2c:48:b0:15:
ca:91:ec:c8:19:de:02:b2:83:bb:38:8a:14:b8:58:
37:10:03:11:10:86:55:b2:2a:eb:3c:17:69:42:33:
05:44:06:da:6b:ca:c0:d3:ce:8f:a8:27:5f:23:10:
b4:7b:db:4c:dd:59:d4:09:64:c6:63:5e:8a:d7:77:
e8:d9:18:55:42:ec:33:12:c1:8d:31:e0:74:94:33:
19:83:8c:7d:e6:b0:a2:5b:b9:fa:9b:e6:36:2d:b7:
ad:e2:ce:72:26:b7:6e:19:73:60:44:3a:12:32:91:
80:fa:97:3a:8c:6b:51:fc:7f:3f:b4:6d:e4:e5:fb:
c0:06:b6:17:21:d8:08:2b:9c:37:33:ee:04:22:86:
58:f6:8f:3c:41:45:30:09:07:d8:93:20:a5:be:d6:
61:b0:c4:01:3d:ee:54:fa:57:3b:fa:95:35:8d:cd:
88:23:60:b1:b9:01:64:ff:e3:25:e3:0f:a4:10:42:
ff:b1:77:90:dc:33:7b:b1:0c:87:00:6b:94:b3:47:
40:6b:39:3e:72:41:63:a1:54:c6:ef:27:9a:82:1e:
38:f9:b2:5d:bb:fb:a6:e8:26:f5:dd:b1:fc:18:3c:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.192.0/22
Signature Algorithm: sha256WithRSAEncryption
18:99:d6:72:45:ba:c0:c7:32:5d:da:d0:4b:9c:d5:dd:26:7a:
53:c0:d1:83:b1:d8:7a:7d:1b:a6:6b:7b:c8:1f:c1:6a:59:00:
b9:51:7a:8b:a8:a3:15:4a:00:4d:f7:fb:49:fc:8d:cb:e9:b4:
d9:82:b7:93:2e:92:6b:cc:4e:ce:98:dd:2b:fb:b1:cb:9e:c8:
0a:50:96:12:14:59:44:45:e9:9e:d2:61:5b:ac:36:cd:ce:1c:
fe:91:c3:be:3c:7f:1c:c4:5d:e5:be:08:8e:89:60:4c:bb:b4:
52:8a:4d:4b:3e:03:7c:c3:52:3f:fb:33:ff:35:cf:9b:14:ec:
37:c3:6f:5f:d8:b0:aa:7f:93:1b:d5:d9:da:2a:8e:66:4a:b7:
d1:d6:7f:dd:f1:8c:ca:4f:50:91:f9:ba:8d:d4:85:cd:fa:35:
cd:47:8a:77:9e:7b:12:f1:72:eb:6b:c6:bd:42:a4:18:00:cb:
af:02:26:a0:41:ac:9c:82:e8:f9:7f:d6:fb:e0:08:dd:42:b2:
46:b9:22:12:27:54:14:b4:78:26:f5:2b:97:23:61:69:3e:8a:
07:d2:15:08:26:e4:2b:d4:a0:e1:11:d9:88:9d:9d:29:55:61:
84:16:b8:53:eb:c2:5b:93:b5:16:01:52:25:5f:03:20:33:3d:
ff:50:99:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:40:41 2025 by rpki-client