Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
File: OuUFv8f9kXaGscizohj1UI9aNwo.cer (raw, json)
Hash identifier: iMmv9YMkPx4GIIa9FckLAdM1/fjERHOof+3GYQ0/vXY=
Subject key identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258EC3B819A90F80C5500133EDA2B286
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.43.0.0/22
IP: 2a01:6620::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:c3:b8:19:a9:0f:80:c5:50:01:33:ed:a2:b2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:56:a1:69:0c:bb:c9:c6:80:9f:70:e6:5f:
f2:4b:9d:74:5b:19:77:86:d7:33:85:66:90:6b:ce:
14:fe:8a:4c:89:b9:9f:b9:93:01:00:59:f0:50:f9:
e5:96:06:30:f6:35:e7:12:03:09:44:bf:ba:1a:0f:
31:05:bb:fe:9c:24:d6:b0:eb:c5:17:82:15:4b:0a:
ab:26:93:c2:ae:e2:f3:06:ea:df:e1:e6:73:79:35:
e5:35:ab:4f:05:c2:b6:c9:75:bb:bc:c8:a7:fc:8e:
8c:ee:13:1d:fa:d2:4e:d6:41:02:45:0c:aa:8f:97:
ea:77:6a:4f:c2:41:ac:1d:32:f7:6d:f3:56:41:d1:
d4:b1:70:6a:7f:22:70:6a:ed:09:5f:7d:b1:d1:1b:
80:a6:aa:ae:5b:a8:f9:99:be:fa:a3:bb:21:39:7f:
33:0e:99:ef:9e:a0:f8:81:52:bd:92:f0:ce:8c:a2:
d5:8a:4b:a6:65:fd:71:c0:73:c3:ae:cf:b1:57:ab:
a0:b6:17:bf:78:34:cd:41:a7:c0:76:da:e5:bd:aa:
7f:6a:08:5e:1c:50:08:37:61:b8:20:d1:00:fa:24:
0d:0b:b9:cc:df:e0:ad:de:8c:31:a8:69:d8:f4:5c:
4f:d0:ff:fb:3f:bf:a7:b7:10:eb:cf:9b:b2:3e:21:
40:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.0.0/22
IPv6:
2a01:6620::/32
Signature Algorithm: sha256WithRSAEncryption
46:51:6d:36:92:f8:00:bd:01:bb:8b:80:ab:dc:34:5f:c9:71:
8f:68:7b:19:cb:7f:78:b1:b2:d3:87:5b:43:a3:38:81:a9:42:
4e:87:05:ee:d1:ea:50:59:3e:9b:6c:6a:fa:ec:01:ec:07:15:
32:75:cb:a9:eb:0e:e5:0c:7d:a6:6f:a3:5b:96:9d:61:19:e9:
72:b4:1e:c5:f5:e2:8c:98:f7:53:15:c5:29:5a:04:10:f2:55:
f1:20:32:b2:c5:f2:f1:da:35:21:69:dd:d4:ea:5c:03:56:f5:
be:87:61:6f:11:d5:31:2b:a1:cc:dc:db:73:67:e4:e3:00:19:
00:0c:c6:63:f5:b0:74:7a:16:8c:9c:c7:e9:2b:a9:d7:54:ed:
cc:b9:36:8f:ed:59:4a:41:0a:82:ab:1f:b3:60:f3:a4:18:35:
13:25:1f:6e:51:95:a5:b0:10:75:a7:bb:1a:92:22:af:f8:57:
20:a7:a3:73:00:93:62:14:8c:e4:be:74:13:23:69:50:96:3a:
1e:3d:87:04:61:47:9b:dc:cb:80:4e:63:ab:fe:d5:5a:00:f6:
61:6d:55:a3:e8:52:b4:c6:09:79:a6:df:de:e0:6a:64:59:74:
28:8c:5c:5f:02:9d:a8:f3:87:ec:89:ee:91:5f:76:a8:cb:50:
a3:3d:29:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:45:48 2025 by rpki-client