Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
File: OZ61MiamYLfJOBbGFrZtjHZVBgM.cer (raw, json)
Hash identifier: tzvyFJWF7n/k77aiY03cLve8xS+HyLkrVZWHo/fS8lA=
Subject key identifier: 39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747737362894F04A1B0485ABBF0519E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59783
IP: 217.144.52.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:73:73:62:89:4f:04:a1:b0:48:5a:bb:f0:51:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=399eb53226a660b7c93816c616b66d8c76550603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:0d:a3:91:d4:ed:67:e1:7b:b1:f2:0f:24:
a2:bb:f4:6b:c7:fc:99:65:82:be:16:6b:86:b3:8f:
17:92:4e:23:97:72:46:58:71:fc:4b:2a:93:59:b3:
5e:4e:40:c1:b5:9b:41:95:15:a3:d5:9f:50:95:ad:
e6:d3:70:41:e5:30:46:5d:2d:77:c7:17:69:31:28:
60:7c:44:07:0b:1a:72:9f:38:9e:f3:48:f3:d8:73:
c6:b5:2f:a9:4d:23:75:57:1b:9c:80:c4:12:e3:2a:
6a:06:27:2f:76:19:28:35:83:81:bc:d2:e5:b7:b8:
7b:30:2b:7e:08:a4:47:af:87:29:3c:d4:fd:7c:fa:
f9:7c:7d:df:7c:3d:7b:7f:8d:31:e6:ed:36:30:fb:
31:cb:ec:80:ea:6f:3c:f3:d9:3b:8f:c4:88:b7:7b:
fa:1f:ec:d5:e1:46:b0:8f:4e:06:7b:6e:86:a7:e9:
af:16:f5:f8:cb:d1:02:0e:43:73:9f:64:f9:01:a0:
0d:d9:16:8e:9d:72:b2:cb:78:dc:d2:d0:8e:0c:98:
75:68:3b:41:2e:81:1f:05:4d:ad:91:3c:92:72:40:
04:a8:ad:25:c0:62:29:d1:69:84:9a:f2:12:23:14:
da:dc:3d:d6:5f:12:a2:78:3d:d3:13:5e:d3:d8:ca:
d4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.144.52.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59783
Signature Algorithm: sha256WithRSAEncryption
29:4b:0a:7a:62:00:4d:cc:8c:8a:c9:fb:4f:e3:3e:10:b0:f7:
d7:a2:11:e2:7d:b7:03:9f:85:e6:2d:a4:59:46:28:e0:78:c2:
93:ed:fe:60:40:f3:ec:a3:27:89:5d:b6:ba:c8:24:18:9a:d4:
15:21:5b:15:92:60:bd:a2:e6:33:bd:76:b8:dd:2a:20:51:26:
d0:14:70:1f:7d:b2:c0:67:93:be:c2:c9:81:09:bc:84:61:d0:
ba:91:ff:14:80:0e:68:42:5c:01:fd:83:a9:04:bf:e9:4b:aa:
7e:95:23:0a:97:fd:96:1c:4a:1c:cd:c0:2a:fb:4d:2f:be:e1:
3b:b7:b1:44:3e:63:03:71:12:42:2f:26:4a:b2:80:a9:c1:76:
4f:32:63:d3:f8:84:6b:7d:54:09:a1:f7:2b:12:ba:ac:c0:08:
d4:97:10:ec:88:54:13:b3:af:53:e2:4f:b5:40:ae:86:71:fe:
c7:ea:38:ca:ab:88:ee:a1:b9:9f:66:f5:82:36:fe:72:17:e4:
3f:66:3d:a6:d2:fc:30:0e:de:ab:bd:01:ff:b2:9e:88:1f:39:
6e:69:98:a3:e2:f4:f8:16:b6:54:95:4e:e8:ba:2a:d3:3b:e5:
c3:4d:36:b5:69:a2:94:0d:5d:f3:fb:3c:0b:bd:fa:43:8f:27:
e1:b3:b8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:04:38 2025 by rpki-client