Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
File: OtyOotHlv55F8F2VQFb4yQR6NgU.cer (raw, json)
Hash identifier: BHL4H577JLOYcRYQ5uWGJ07kCxEdHZAlk9MkuWSlORU=
Subject key identifier: 3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942368FE6F2370C0E97FFA717AE3DE4790
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203998
IP: 185.32.48.0/22
IP: 2a04:4f00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:fe:6f:23:70:c0:e9:7f:fa:71:7a:e3:de:47:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:2c:8e:1c:2b:50:7f:88:38:79:1c:c6:85:
34:f5:27:e1:fe:b5:1f:10:2f:ee:25:82:8b:3d:a8:
79:14:c5:36:6c:8e:40:aa:3a:02:92:d2:a4:15:8b:
21:24:92:29:ec:b7:49:9f:d2:7b:bc:3e:88:0f:a0:
30:ce:67:94:0b:ef:28:db:9a:07:da:4c:4a:71:7f:
1f:62:84:90:0e:0b:14:63:02:e6:23:df:29:76:e5:
54:48:b3:b6:55:df:6c:3e:f6:9e:e5:64:7e:27:85:
e0:4f:ed:c4:07:01:78:da:52:ef:d9:ef:b6:c0:21:
7a:e8:d6:2f:f1:80:bc:b9:4b:e8:6a:a3:a6:fb:a5:
e3:b9:5d:be:5c:27:a3:00:04:0c:5b:57:96:d1:3e:
5d:8e:f0:fe:98:56:0c:07:18:a8:d4:e2:f7:46:1c:
b6:e2:a7:71:9d:c1:7c:87:bd:89:12:e3:9e:d7:a2:
b6:0f:3d:ca:f5:6e:91:72:35:e3:19:2e:d9:99:f1:
35:d0:80:4c:4a:24:c5:f3:11:a1:8c:58:43:92:d9:
61:79:82:1c:0e:59:cb:a2:0c:32:b9:cf:12:a4:a4:
3f:a9:4f:30:ed:16:4f:11:c2:a7:4a:b0:42:79:8d:
fc:a5:78:a5:19:91:32:37:84:64:82:4d:90:6f:63:
b1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.48.0/22
IPv6:
2a04:4f00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203998
Signature Algorithm: sha256WithRSAEncryption
ae:98:48:54:66:e9:a9:c4:6c:f6:5d:73:cd:01:2f:65:26:52:
b3:8e:df:4e:af:fa:3f:e3:69:43:27:c2:bd:0a:f2:98:40:55:
f2:4a:c9:19:db:97:2a:1e:19:9d:c4:25:70:0f:af:7e:c1:c6:
0c:89:cd:04:aa:3d:a8:a1:d9:01:c6:30:d9:c5:4f:a1:d7:de:
7b:91:9e:9d:90:e5:5b:bf:86:ac:36:73:b5:b6:51:51:6b:11:
98:41:2f:38:cd:8f:7e:b3:e2:bd:c7:a2:ec:bc:10:6f:32:62:
b6:5f:94:ca:20:a1:af:1e:e3:92:11:d1:13:22:af:f9:f7:0e:
cc:af:99:14:f4:d5:bc:e1:00:c6:d1:c4:4f:55:db:34:1f:91:
74:81:33:b4:62:e2:44:93:ef:8d:1e:bf:76:27:a4:c1:d5:13:
fa:4a:d5:ff:4f:a5:f9:57:8b:25:63:67:ae:c3:2c:d4:41:ee:
a3:c1:0d:b6:c8:60:d3:eb:4a:7a:53:54:91:5e:6d:fd:da:81:
af:58:c6:98:d1:c8:da:be:ba:fa:bb:5d:96:05:cd:78:ba:56:
72:88:57:7a:de:c8:a5:64:ca:a9:c8:47:ac:bd:a1:28:33:ba:
d2:eb:53:4b:41:5f:43:91:47:47:b5:ce:3b:be:0e:8e:e1:53:
37:09:23:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:51 2025 by rpki-client