Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
File: OpNtLymObP1WYEVz0e-eDoKZtSk.cer (raw, json)
Hash identifier: Z/L/PwpzD9pPn7cvkLhsg3zVxBg6fw4JF0nwf7UKGh0=
Subject key identifier: 3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC2FF355C0D20094775C71C8FB1239
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 164.131.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:2f:f3:55:c0:d2:00:94:77:5c:71:c8:fb:12:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:c8:95:c5:c8:cb:41:51:cf:42:3d:26:c9:
44:fe:6a:2f:a4:c1:a4:bc:b2:6e:1a:7e:ad:6a:ab:
26:66:9b:38:78:11:26:49:b3:c0:49:f1:12:b3:7e:
f4:fc:3a:23:69:d2:7b:a6:42:83:33:a3:65:c7:24:
0d:e0:ac:ec:4f:7d:e4:48:7b:e6:d9:08:c4:fe:33:
9b:a9:30:c3:80:7e:ae:84:8e:3b:b0:59:cb:37:49:
52:a0:fb:cd:72:5a:e8:40:3e:80:88:bc:b4:2a:79:
79:45:bd:50:4d:35:2f:5c:e0:1d:d4:ef:4c:ac:a4:
43:7d:c6:32:9d:c2:63:32:ee:e4:5b:9b:6e:31:0c:
d7:e1:c3:2d:c9:c6:83:2a:eb:76:61:4f:86:f0:8a:
66:45:3f:83:71:66:1f:3b:fa:68:2f:b6:c0:da:b0:
d3:87:5d:cc:e6:80:ac:55:bd:e9:5f:51:dc:19:a0:
18:0f:22:27:6b:82:46:13:5b:c9:12:16:67:54:9f:
a3:05:aa:7e:9f:5f:dd:0b:d8:3a:08:06:6e:34:5c:
ce:40:83:b8:3b:e0:dd:6a:26:ec:b4:3d:7b:fb:c3:
7c:d5:6e:7c:2f:b8:56:a0:07:e7:16:fe:4c:74:74:
fa:6e:83:f4:51:1c:80:9d:ff:94:15:aa:f1:f5:b0:
c2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.131.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:80:d8:eb:ba:b9:35:0b:34:24:be:f9:93:d8:88:32:ec:e7:
66:2a:8f:42:ec:25:3d:73:3a:3d:f8:40:59:c2:83:a0:f3:f8:
18:6c:02:b3:65:86:ad:30:2c:57:11:f6:c1:72:ad:7f:6c:24:
5f:30:8f:e4:33:03:50:2e:68:cd:b4:bd:8a:21:e8:9f:fa:b8:
d7:bb:ba:d5:be:f2:a4:b9:ac:4f:82:01:17:2c:b6:46:9b:a7:
ff:df:b9:18:53:a9:fc:81:e3:74:72:df:32:42:b7:c4:22:45:
92:b7:f3:5d:ec:ad:7a:e1:f4:01:6f:7f:2c:1d:ca:53:be:7c:
4c:b1:67:80:79:aa:ad:1f:2b:bf:a6:05:9c:e4:04:06:39:a9:
27:04:23:75:41:48:4b:72:23:f7:de:f0:f3:77:85:72:db:e1:
26:98:04:d2:95:f2:24:ff:1f:13:68:2e:bf:dc:e6:2c:66:ef:
9c:44:21:92:ef:fe:6d:bd:3e:2f:a9:0b:45:d7:1f:d7:cc:e4:
de:01:be:d4:83:f4:26:23:6d:b5:07:1d:ce:08:85:f8:6b:b6:
ed:00:24:be:24:9f:12:73:4c:5b:79:99:6e:bd:d7:8f:c2:1b:
e2:fd:8e:e1:ac:32:a5:4c:37:ed:7e:b9:c2:cc:f5:a6:fe:ea:
dd:0a:c1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:49:33 2024 by rpki-client on console-ams.rpki-client.org