Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
File: Ooz8_rg-iPNror8kRduewegvDVQ.cer (raw, json)
Hash identifier: z7JA+xfLSUB3RQBCIjlwBO8XosPFjZajTO9tGi0hPtI=
Subject key identifier: 3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA297D2C847E9094359BFA16D2033E0E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200301
IP: 2001:678:7e4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:7d:2c:84:7e:90:94:35:9b:fa:16:d2:03:3e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ca:90:8b:00:52:15:13:11:21:fd:26:8d:d4:
42:8c:01:32:22:48:3d:94:6b:07:e5:52:51:08:e7:
3e:f8:ee:1d:10:4f:9c:88:1d:7d:b3:02:92:34:f0:
18:56:ae:6b:9e:7e:f8:b1:3f:f9:3e:92:e4:17:81:
59:68:45:a0:ea:f1:77:f4:91:a1:1e:45:6c:26:9e:
0a:66:92:3b:a0:74:a0:1c:71:7b:14:e1:d6:d9:71:
78:ee:47:c7:3c:e0:76:12:80:1e:1d:ed:15:fc:33:
13:f9:9e:2f:13:f6:8b:c2:74:d2:62:fa:d4:59:32:
fe:a5:be:61:5f:c1:c9:98:c6:34:9e:a1:c9:8d:bd:
e3:6a:25:15:90:1e:76:89:4d:ac:7e:10:4a:df:51:
90:78:4a:6f:b9:a8:79:35:85:df:77:40:e7:ee:f0:
a9:e6:66:f6:bf:0e:e1:62:b2:3e:be:47:fc:b9:5a:
a4:16:83:64:ad:a3:47:eb:91:da:05:81:bd:b3:fc:
6b:81:69:b8:2b:90:83:f2:e2:db:68:e2:0e:5f:86:
77:9f:2b:60:20:93:06:e7:a5:e5:f7:45:5f:f6:92:
b0:4c:a2:bb:97:cc:42:18:7d:5a:6e:bf:97:20:c2:
ef:75:db:6e:7a:86:22:bf:ab:85:35:e7:47:df:0b:
6a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:7e4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200301
Signature Algorithm: sha256WithRSAEncryption
06:fd:fe:8b:39:d8:81:bc:21:92:94:98:04:fd:dc:c7:84:ad:
63:59:c4:a5:06:85:ba:f4:b9:c9:2a:20:c9:c3:39:ba:64:12:
1f:21:f0:0c:9e:0e:fd:16:4a:c2:9e:0c:e6:ce:13:d7:15:ad:
da:03:4f:2a:5f:68:44:ad:43:a8:b2:a0:85:05:f3:0c:b8:ee:
7e:6f:fd:ca:38:3c:ae:1b:c8:db:11:d6:68:39:94:73:cf:bf:
2b:ee:72:16:d0:9a:06:94:18:f8:e1:32:a5:19:7b:ba:0b:64:
e6:72:c8:ac:41:b7:ec:bc:02:4f:e5:fc:86:70:5e:c7:ea:ed:
85:20:64:31:38:a2:a0:87:d3:03:8f:a4:47:f0:55:3e:0a:ee:
45:73:85:ad:57:14:49:18:13:a6:00:84:20:ff:7b:80:cb:fc:
43:66:6b:44:93:68:9b:99:f0:56:27:08:f8:e1:80:05:d9:22:
9f:0f:67:6e:09:76:a5:f1:45:a1:fd:c2:0c:4b:e9:4b:aa:ee:
a1:35:81:b3:48:1e:80:e1:aa:f2:aa:cc:9a:a7:86:fc:eb:29:
a3:6f:86:79:09:03:6c:73:4f:7a:ba:25:eb:d2:8d:a8:f1:ff:
8a:9a:14:9f:0c:9e:c2:f1:20:d0:7e:3a:23:31:01:be:8c:85:
1e:24:86:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:30:56 2024 by rpki-client on console-fra.rpki-client.org