Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ou2AEYAi_xDu6l7LOAUANa7g6sc.cer
File: Ou2AEYAi_xDu6l7LOAUANa7g6sc.cer (raw, json)
Hash identifier: HhXEOwX4RLW4uz2ii6DIHScHJzEawF4e7vCHzwNPh3M=
Subject key identifier: 3A:ED:80:11:80:22:FF:10:EE:EA:5E:CB:38:05:00:35:AE:E0:EA:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B83DD3AAA224C0F1E0BEA7F039A823
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/Ou2AEYAi_xDu6l7LOAUANa7g6sc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 31.24.82.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:3d:d3:aa:a2:24:c0:f1:e0:be:a7:f0:39:a8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3aed80118022ff10eeea5ecb38050035aee0eac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a3:3a:95:2a:94:58:b8:c5:56:f6:b5:ac:7a:
c2:c3:2c:4e:fa:b7:91:8f:d1:af:ab:00:33:89:43:
09:96:77:0d:65:b5:05:3a:95:ba:a2:36:34:7d:7f:
f9:d7:19:1d:a9:58:0b:f7:73:4f:34:96:f0:3f:92:
53:b8:2e:d3:3c:c5:07:e3:c8:3f:0c:08:1f:ed:91:
d1:65:97:f1:ed:93:5f:3e:1c:de:ad:fb:d5:40:1b:
b3:e1:1b:29:79:99:86:09:67:51:b0:8e:fb:64:f7:
5b:51:c2:47:02:b0:87:43:63:28:87:c4:4f:d5:d3:
9c:02:f7:b9:6f:c1:57:07:6e:12:d9:15:2d:d2:4a:
a1:aa:8b:c5:62:78:99:7e:3d:53:23:3f:fa:76:4d:
66:57:0c:57:1c:36:a7:92:77:2b:47:b3:4d:3f:39:
fe:84:a7:77:70:02:9e:18:2d:85:4d:01:5b:53:7f:
08:9f:01:c0:fd:09:71:d3:5c:cc:2a:97:50:83:8e:
1e:02:2d:32:44:3d:f2:33:6c:6c:c8:eb:c5:37:13:
88:70:e0:7c:ac:3c:e6:01:98:fd:d6:70:0b:dc:4f:
31:80:d0:1c:70:c1:7a:52:4d:65:43:5c:5c:ad:05:
2a:2c:f7:93:56:be:00:d2:31:9c:7b:ab:37:6a:3e:
56:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:ED:80:11:80:22:FF:10:EE:EA:5E:CB:38:05:00:35:AE:E0:EA:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/Ou2AEYAi_xDu6l7LOAUANa7g6sc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.82.0/24
Signature Algorithm: sha256WithRSAEncryption
83:4e:cb:65:da:5c:f9:d3:32:32:77:84:ca:b5:50:6c:93:e8:
23:41:a5:54:46:82:a7:35:c8:47:76:87:23:99:1b:70:ab:f9:
a5:9b:71:52:12:7f:ef:ba:53:0c:01:cc:6f:9a:24:76:35:ee:
ac:82:99:8e:5d:9e:74:14:4a:a5:9e:6a:e3:99:54:7b:c4:cd:
f8:9d:0a:6d:e7:ed:ca:64:2c:09:3e:df:07:dd:23:23:39:9d:
1b:8e:9f:a6:de:91:ee:59:4d:0c:60:2a:43:ad:41:bc:41:d8:
b1:3b:cc:53:22:5f:f9:37:f1:5f:41:8b:fa:22:bd:34:fa:aa:
27:15:f0:e8:b9:97:ee:7f:f4:8e:4f:6f:d6:bd:13:d0:ed:e6:
70:3c:a6:5a:29:3d:8c:80:5a:b4:22:1a:12:49:18:e3:fe:38:
5d:d4:7a:b8:d7:d5:6d:cd:d2:d1:f3:de:1f:53:ac:d3:5d:8b:
2a:d0:b0:61:ae:3d:89:20:f9:80:b4:d7:77:10:1d:68:c1:ab:
b8:95:83:c5:76:61:b9:c6:cd:d7:0c:e3:c2:0e:25:97:8a:f1:
fe:4e:08:32:07:1a:34:5a:28:21:5c:52:de:a6:e3:6e:6f:f9:
39:8e:a4:34:dd:ae:4a:c1:52:cf:f4:e0:15:b1:e1:c3:40:0b:
1c:9d:8c:2f
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzGuD3TqqIkwPHgvqfwOagjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAzMDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWVkODAxMTgwMjJmZjEwZWVlYTVlY2IzODA1MDAzNWFlZTBlYWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqM6lSqUWLjFVva1rHrCwyxO+reR
j9GvqwAziUMJlncNZbUFOpW6ojY0fX/51xkdqVgL93NPNJbwP5JTuC7TPMUH48g/
DAgf7ZHRZZfx7ZNfPhzerfvVQBuz4RspeZmGCWdRsI77ZPdbUcJHArCHQ2Moh8RP
1dOcAve5b8FXB24S2RUt0kqhqovFYniZfj1TIz/6dk1mVwxXHDankncrR7NNPzn+
hKd3cAKeGC2FTQFbU38InwHA/Qlx01zMKpdQg44eAi0yRD3yM2xsyOvFNxOIcOB8
rDzmAZj91nAL3E8xgNAccMF6Uk1lQ1xcrQUqLPeTVr4A0jGce6s3aj5WPwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFDrtgBGAIv8Q7upeyzgFADWu4OrHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3Lzk0NjZj
Yi1iMzI2LTRiMTctYmJhNC0zYzdlYzgyMjgwOTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvOTQ2NmNi
LWIzMjYtNGIxNy1iYmE0LTNjN2VjODIyODA5OS8xL091MkFFWUFpX3hEdTZsN0xP
QVVBTmE3ZzZzYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAHxhSMA0GCSqGSIb3DQEBCwUAA4IBAQCDTstl
2lz50zIyd4TKtVBsk+gjQaVURoKnNchHdocjmRtwq/mlm3FSEn/vulMMAcxvmiR2
Ne6sgpmOXZ50FEqlnmrjmVR7xM34nQpt5+3KZCwJPt8H3SMjOZ0bjp+m3pHuWU0M
YCpDrUG8QdixO8xTIl/5N/FfQYv6Ir00+qonFfDouZfuf/SOT2/WvRPQ7eZwPKZa
KT2MgFq0IhoSSRjj/jhd1Hq419VtzdLR894fU6zTXYsq0LBhrj2JIPmAtNd3EB1o
wau4lYPFdmG5xs3XDOPCDiWXivH+TggyBxo0WighXFLepuNub/k5jqQ03a5KwVLP
9OAVseHDQAscnYwv
-----END CERTIFICATE-----
Generated at Fri May 3 07:32:18 2024 by rpki-client on console-fra.rpki-client.org