Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OyqnIFaBcWIOm8m5fa3MdLUTOU8.cer
File: OyqnIFaBcWIOm8m5fa3MdLUTOU8.cer (raw, json)
Hash identifier: Q++o5B8EBa2zyEpACJ8yxIlBkU51w9Nwv2kq66vK+Dc=
Subject key identifier: 3B:2A:A7:20:56:81:71:62:0E:9B:C9:B9:7D:AD:CC:74:B5:13:39:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B557A411C64047574179DE0A94B1D7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197433
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:57:a4:11:c6:40:47:57:41:79:de:0a:94:b1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b2aa720568171620e9bc9b97dadcc74b513394f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:8f:f4:cf:8c:bc:66:cf:43:71:f1:f8:99:
08:de:1e:b5:f9:8b:d6:fd:ec:81:ae:3c:a8:4c:8a:
53:fd:e5:9f:b2:3f:d8:39:8b:ee:f3:70:2b:3e:bb:
9c:5a:e8:44:1f:47:f3:87:69:50:b4:39:ec:69:1f:
a1:ce:d9:5f:fe:3d:54:af:16:c6:b2:c7:7a:a3:6b:
7f:93:fb:b5:3e:0a:f6:2e:31:6a:0f:31:4f:3b:9c:
9c:15:ef:84:6f:70:76:01:5a:c3:54:fa:68:84:f5:
36:81:13:a4:8d:ef:d0:39:7f:76:d1:5f:1c:5a:51:
34:7a:bb:d8:06:81:a5:db:03:45:99:fe:05:a6:78:
fd:56:ab:db:64:ed:ca:77:fb:5e:38:5f:f9:7b:47:
92:38:a2:bc:6d:7c:fe:51:98:66:1b:44:ee:bf:12:
84:92:68:26:ac:d3:cb:fc:29:6e:a9:01:1a:ee:0f:
b0:a2:14:a9:8e:14:aa:f0:8f:ce:39:25:31:95:cd:
76:c3:d5:09:35:cc:70:74:ef:b1:fe:e5:5e:ec:02:
c3:6e:58:60:b1:5f:3d:50:82:9c:4f:d6:df:2b:a8:
78:f4:cf:4d:41:43:b5:0d:b6:2e:09:be:0c:10:5e:
7d:67:81:7e:25:39:45:bd:a5:f2:38:64:ed:2c:65:
d1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2A:A7:20:56:81:71:62:0E:9B:C9:B9:7D:AD:CC:74:B5:13:39:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197433
Signature Algorithm: sha256WithRSAEncryption
8a:c0:20:3c:8f:fa:6b:fd:05:6e:58:18:55:b3:93:57:67:4c:
1f:31:d7:f8:b2:cd:88:f0:ea:04:a6:d9:44:a7:72:b8:df:9e:
83:da:0f:a7:e8:a3:54:9d:90:9b:fa:3e:5d:aa:62:71:eb:fc:
84:29:d5:66:3d:20:c1:79:56:3a:01:70:12:27:02:f4:f7:5f:
b8:04:80:a1:8c:9e:5a:1b:14:58:69:e7:f3:a5:e9:5d:84:64:
e7:f2:e4:b0:97:38:d0:fa:92:1c:59:ba:09:db:aa:8a:ac:8f:
1b:ac:87:38:c1:fd:5e:88:a6:07:2d:74:9c:1e:1b:d7:ba:8a:
99:0a:f4:9b:60:6f:ba:b2:89:e0:06:38:5c:bc:4c:17:02:50:
f1:b7:81:f1:4b:63:88:c5:14:6a:c4:f6:0a:5f:ad:ff:6d:f5:
06:85:b8:27:99:d8:cc:f9:2f:83:23:ab:65:ea:70:5a:c1:d7:
18:21:e1:a6:7a:0a:45:1d:86:f3:cb:0f:3d:ab:95:ad:f2:b9:
1d:d9:7e:87:e0:27:6b:9a:1e:fc:98:a8:c3:f6:5f:65:b6:d3:
e3:0e:ca:24:cc:43:13:d9:96:03:c8:99:e6:d3:b4:40:13:13:
ad:8e:d8:a5:11:0d:a9:57:fb:32:70:dc:fd:c8:e0:a3:cf:67:
95:ff:13:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:50:57 2025 by rpki-client