Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OyqnIFaBcWIOm8m5fa3MdLUTOU8.cer
File: OyqnIFaBcWIOm8m5fa3MdLUTOU8.cer (raw, json)
Hash identifier: hdaxcFxktLIwIk21RBWDUuj4NuYI6tz6ftCK27lQhGw=
Subject key identifier: 3B:2A:A7:20:56:81:71:62:0E:9B:C9:B9:7D:AD:CC:74:B5:13:39:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80150F51F2484F984A68EC3074681A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197433
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:50:f5:1f:24:84:f9:84:a6:8e:c3:07:46:81:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b2aa720568171620e9bc9b97dadcc74b513394f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:8f:f4:cf:8c:bc:66:cf:43:71:f1:f8:99:
08:de:1e:b5:f9:8b:d6:fd:ec:81:ae:3c:a8:4c:8a:
53:fd:e5:9f:b2:3f:d8:39:8b:ee:f3:70:2b:3e:bb:
9c:5a:e8:44:1f:47:f3:87:69:50:b4:39:ec:69:1f:
a1:ce:d9:5f:fe:3d:54:af:16:c6:b2:c7:7a:a3:6b:
7f:93:fb:b5:3e:0a:f6:2e:31:6a:0f:31:4f:3b:9c:
9c:15:ef:84:6f:70:76:01:5a:c3:54:fa:68:84:f5:
36:81:13:a4:8d:ef:d0:39:7f:76:d1:5f:1c:5a:51:
34:7a:bb:d8:06:81:a5:db:03:45:99:fe:05:a6:78:
fd:56:ab:db:64:ed:ca:77:fb:5e:38:5f:f9:7b:47:
92:38:a2:bc:6d:7c:fe:51:98:66:1b:44:ee:bf:12:
84:92:68:26:ac:d3:cb:fc:29:6e:a9:01:1a:ee:0f:
b0:a2:14:a9:8e:14:aa:f0:8f:ce:39:25:31:95:cd:
76:c3:d5:09:35:cc:70:74:ef:b1:fe:e5:5e:ec:02:
c3:6e:58:60:b1:5f:3d:50:82:9c:4f:d6:df:2b:a8:
78:f4:cf:4d:41:43:b5:0d:b6:2e:09:be:0c:10:5e:
7d:67:81:7e:25:39:45:bd:a5:f2:38:64:ed:2c:65:
d1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2A:A7:20:56:81:71:62:0E:9B:C9:B9:7D:AD:CC:74:B5:13:39:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197433
Signature Algorithm: sha256WithRSAEncryption
93:85:af:f7:67:11:c2:21:3d:63:9c:29:cc:3d:e1:ef:18:01:
8a:40:6b:e3:cc:bc:96:1b:6c:8f:87:b5:20:2d:52:33:e9:c2:
c0:c7:7c:5c:b2:ff:56:9c:7e:95:31:3a:6c:be:57:1a:20:a6:
ba:7d:16:0b:54:f6:a8:34:41:52:cb:ee:73:c1:eb:fb:c3:06:
36:32:22:58:dc:6a:50:ae:94:df:5f:0a:c3:b0:31:0a:e7:f6:
ee:66:cd:d7:fa:5b:1e:f1:f1:86:c9:34:3f:ff:9f:22:62:9b:
56:a6:b4:a1:de:e6:37:96:62:b0:84:2b:fa:e3:6a:45:86:5b:
75:ec:4e:6a:0f:f7:d8:de:73:d6:b0:a4:33:49:3e:7b:e5:62:
60:f5:ae:bb:0e:e5:2a:94:61:44:a0:28:7a:8e:84:52:06:77:
62:de:ac:24:0d:36:d7:cb:8c:1c:1d:ea:85:64:40:e1:5b:01:
ea:2d:37:c1:cc:8b:e1:bc:35:eb:09:71:f9:b1:e7:c8:91:a5:
bb:d7:05:10:30:08:0b:93:7c:74:20:17:47:66:9f:37:7d:74:
a4:8d:9d:cf:d0:84:de:ed:e0:db:10:85:cd:93:aa:2f:6b:cf:
f6:c4:58:d3:2c:e4:4a:66:2c:ab:54:cd:ae:97:64:df:10:10:
e7:09:57:c7
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzIAVD1HySE+YSmjsMHRoGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjJhYTcyMDU2ODE3MTYyMGU5YmM5Yjk3ZGFkY2M3NGI1MTMzOTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu72P9M+MvGbPQ3Hx+JkI3h61+YvW
/eyBrjyoTIpT/eWfsj/YOYvu83ArPrucWuhEH0fzh2lQtDnsaR+hztlf/j1UrxbG
ssd6o2t/k/u1Pgr2LjFqDzFPO5ycFe+Eb3B2AVrDVPpohPU2gROkje/QOX920V8c
WlE0ervYBoGl2wNFmf4Fpnj9VqvbZO3Kd/teOF/5e0eSOKK8bXz+UZhmG0TuvxKE
kmgmrNPL/CluqQEa7g+wohSpjhSq8I/OOSUxlc12w9UJNcxwdO+x/uVe7ALDblhg
sV89UIKcT9bfK6h49M9NQUO1DbYuCb4MEF59Z4F+JTlFvaXyOGTtLGXRtQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFDsqpyBWgXFiDpvJuX2tzHS1EzlPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyLzI3NzU4
OS04ZDlhLTRiMjItOWExNS02MDVkZTBlYWFlYjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvMjc3NTg5
LThkOWEtNGIyMi05YTE1LTYwNWRlMGVhYWViNi8xL095cW5JRmFCY1dJT204bTVm
YTNNZExVVE9VOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMDOTANBgkqhkiG9w0BAQsFAAOCAQEAk4Wv92cRwiE9
Y5wpzD3h7xgBikBr48y8lhtsj4e1IC1SM+nCwMd8XLL/Vpx+lTE6bL5XGiCmun0W
C1T2qDRBUsvuc8Hr+8MGNjIiWNxqUK6U318Kw7AxCuf27mbN1/pbHvHxhsk0P/+f
ImKbVqa0od7mN5ZisIQr+uNqRYZbdexOag/32N5z1rCkM0k+e+ViYPWuuw7lKpRh
RKAoeo6EUgZ3Yt6sJA0218uMHB3qhWRA4VsB6i03wcyL4bw16wlx+bHnyJGlu9cF
EDAIC5N8dCAXR2afN310pI2dz9CE3u3g2xCFzZOqL2vP9sRY0yzkSmYsq1TNrpdk
3xAQ5wlXxw==
-----END CERTIFICATE-----
Generated at Fri May 3 06:58:40 2024 by rpki-client on console-ams.rpki-client.org