Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
File: Oab1TSH1N6neJHh90Oj7pAapyt0.cer (raw, json)
Hash identifier: UFR8mt42eTGPk8rXk5q7BOISFZty31ncU73WjofiHaM=
Subject key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42506F37BCE3FC426544B3FE70AD7B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.37.232.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:06:f3:7b:ce:3f:c4:26:54:4b:3f:e7:0a:d7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:90:a1:0c:90:c3:3c:68:38:1f:95:2a:e8:
36:5b:0f:01:00:b2:e6:bc:b7:2b:94:48:ec:be:9b:
24:24:9d:82:00:d0:71:db:12:ed:35:1e:71:d4:4f:
ba:52:6d:ef:36:9d:fe:44:75:b5:81:eb:8a:b3:0a:
ca:d3:88:b0:a7:80:b9:da:91:18:68:77:45:d5:04:
cd:c4:8c:65:74:1f:75:0f:0c:e9:b9:c1:e6:20:d0:
c7:6a:04:c6:ba:0d:a1:06:0d:00:b8:33:31:f5:18:
ca:9e:eb:2a:0b:48:05:9e:91:50:0d:40:58:d3:1f:
64:97:c6:0e:ff:7b:8c:b3:00:3a:cf:b7:3e:ce:8a:
cd:68:db:a9:aa:71:5b:e3:f3:b3:91:54:fb:61:0c:
1b:20:a8:d9:1d:84:43:87:27:8e:d1:78:96:ef:a2:
4f:a5:f7:5d:ab:8b:32:40:45:8c:2b:bf:c6:f9:2f:
14:27:48:00:e9:58:73:c8:1b:2d:69:10:1b:f0:61:
16:5d:d5:14:df:c6:3d:a6:06:1c:a1:dc:e8:e2:c0:
f0:d2:6c:ff:3d:ef:cc:88:46:8b:39:26:19:94:e3:
f4:0d:f8:0f:7b:8d:2f:27:15:36:26:e9:1b:8a:f6:
e8:6a:0a:90:4e:7c:98:b5:49:47:0c:bf:75:08:98:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.232.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:e7:f3:cc:cf:da:b1:88:ad:18:3e:ac:40:87:fb:7b:94:b5:
fa:7b:00:48:33:be:4e:0e:98:d4:c4:2b:81:44:23:15:8d:26:
23:6e:69:cf:c2:eb:91:e4:31:4e:7c:33:8b:56:6c:f3:74:39:
b2:e4:b8:70:62:90:27:a6:c2:52:b6:99:4c:65:84:56:93:13:
01:3c:bd:cb:a2:37:5a:18:59:90:49:7d:92:9e:98:1c:35:f9:
16:8e:b2:14:0a:d2:04:2f:a7:9e:76:da:e0:36:e3:e8:b4:30:
9e:71:42:30:94:36:30:7e:7b:0e:97:cc:9b:85:6c:4b:a9:20:
a0:4d:2d:3a:a2:0d:52:b4:3a:d8:04:b3:b6:ac:84:86:3b:5a:
09:42:0d:0b:51:f9:d3:f8:fa:6f:c8:bc:f0:ce:81:50:75:0b:
d2:bd:70:b5:45:15:77:b1:ce:cb:78:0d:62:d0:3e:a7:de:ec:
3f:da:cf:b2:e0:06:1e:7d:c5:da:85:e4:c5:ba:57:31:36:14:
83:18:39:dd:35:6e:d9:bb:f7:94:72:2c:18:07:ea:02:39:1b:
e8:de:90:d2:a2:a6:fe:89:db:af:f9:69:57:b3:7c:43:9e:5e:
70:87:bd:00:91:ce:8c:27:9a:84:61:30:0d:1e:da:9a:b4:37:
8d:ae:ae:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:30:54 2024 by rpki-client on console-ams.rpki-client.org