Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
File: OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer (raw, json)
Hash identifier: 3iSGOkzUjoPapV19dk1bETG8QdaM0v6lgYsQ+D7PGlw=
Subject key identifier: 39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F6CF9D2D837D7FC581AB4E5D0CFF1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 85.208.192.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:6c:f9:d2:d8:37:d7:fc:58:1a:b4:e5:d0:cf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:b5:e6:ce:f3:3a:50:34:bb:6f:87:1c:82:
10:ca:e3:e4:e7:3d:9e:0c:52:ab:f3:2c:48:b0:15:
ca:91:ec:c8:19:de:02:b2:83:bb:38:8a:14:b8:58:
37:10:03:11:10:86:55:b2:2a:eb:3c:17:69:42:33:
05:44:06:da:6b:ca:c0:d3:ce:8f:a8:27:5f:23:10:
b4:7b:db:4c:dd:59:d4:09:64:c6:63:5e:8a:d7:77:
e8:d9:18:55:42:ec:33:12:c1:8d:31:e0:74:94:33:
19:83:8c:7d:e6:b0:a2:5b:b9:fa:9b:e6:36:2d:b7:
ad:e2:ce:72:26:b7:6e:19:73:60:44:3a:12:32:91:
80:fa:97:3a:8c:6b:51:fc:7f:3f:b4:6d:e4:e5:fb:
c0:06:b6:17:21:d8:08:2b:9c:37:33:ee:04:22:86:
58:f6:8f:3c:41:45:30:09:07:d8:93:20:a5:be:d6:
61:b0:c4:01:3d:ee:54:fa:57:3b:fa:95:35:8d:cd:
88:23:60:b1:b9:01:64:ff:e3:25:e3:0f:a4:10:42:
ff:b1:77:90:dc:33:7b:b1:0c:87:00:6b:94:b3:47:
40:6b:39:3e:72:41:63:a1:54:c6:ef:27:9a:82:1e:
38:f9:b2:5d:bb:fb:a6:e8:26:f5:dd:b1:fc:18:3c:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.192.0/22
Signature Algorithm: sha256WithRSAEncryption
78:92:ed:5f:8f:c9:de:b1:90:fb:6e:02:ab:52:78:7f:d5:1c:
df:36:2a:5c:e8:e2:72:52:dc:df:a9:25:5d:bc:ca:cf:df:f1:
92:9e:15:c6:21:93:95:e7:ad:f7:46:04:25:4c:94:61:50:cf:
2e:5e:d9:4c:a5:1e:fc:33:cd:93:61:ee:b9:13:1c:7a:22:d6:
b1:c1:8e:94:da:18:79:11:14:ed:2d:d4:60:26:a7:6f:d0:af:
87:2a:10:f6:ae:a1:5d:b3:ec:57:20:7c:24:52:91:3a:8a:3f:
95:32:53:32:84:61:63:9b:00:f2:a2:83:6a:d8:6f:51:98:83:
06:a2:5b:ba:9b:ca:b2:26:d9:d2:2b:77:3a:cd:ac:b4:ef:05:
4a:78:e0:73:37:7d:c6:c1:ae:86:e8:b6:ba:6a:aa:2c:01:d4:
ff:e3:14:5a:c5:77:a8:3f:67:8d:f2:66:55:c6:0b:14:69:f0:
57:00:f6:73:8a:3b:01:67:ed:5f:31:52:9c:f6:98:cc:9c:94:
a7:e4:76:0b:b1:3d:26:05:0b:77:a3:d8:b5:38:0b:d9:0c:18:
16:29:c8:e0:20:a3:b3:86:3b:d7:8b:87:8e:db:32:72:f6:ee:
b8:e0:7b:d9:09:99:24:a7:a0:3b:5c:b8:58:0d:78:3a:ca:5b:
05:4c:f7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:14:26 2024 by rpki-client on console-fra.rpki-client.org