Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer
File: OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer (raw, json)
Hash identifier: 8Aa5njw/WZA+i7XGu1lFEseFJnpkpx8j0O+a09gLB48=
Subject key identifier: 3B:30:8E:9B:E3:A8:5B:0F:49:01:F3:5E:7C:F1:FB:75:9B:49:FE:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC501504312931D057A93AB2E0F8E3481
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.53.249.0/24
IP: 2a12:c8c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:50:43:12:93:1d:05:7a:93:ab:2e:0f:8e:34:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b308e9be3a85b0f4901f35e7cf1fb759b49fee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:06:aa:44:c1:1e:d5:20:d4:7e:27:c8:b0:de:
35:32:29:ab:3f:3b:b6:85:4c:31:f4:73:5d:57:32:
7a:99:7d:bb:c7:fc:c7:c9:2a:10:cc:6a:3a:e6:fa:
36:b4:39:76:bc:5e:12:37:6c:49:48:24:da:c3:c1:
72:a4:f8:68:fd:c1:58:9c:8d:7a:24:4e:61:96:fc:
a2:4a:32:45:88:39:12:1f:e4:8e:ef:5b:e1:a8:8d:
e7:ba:9f:f7:c6:f7:3c:6d:1f:b0:7c:c4:62:db:d5:
48:2e:ff:21:d4:3a:f4:93:3b:f3:28:bf:c2:cb:90:
67:40:79:c4:89:79:28:c0:db:64:f2:b7:a5:e9:9b:
c8:40:ed:ae:95:85:02:c7:0b:65:0e:12:89:b8:78:
ac:67:53:0d:3f:21:b9:d2:8f:f2:4f:06:d9:69:6d:
9e:e3:df:eb:6d:df:2e:bc:79:97:70:fc:2a:ab:97:
0e:2a:3f:e5:99:2c:94:7e:63:9b:fd:2c:9c:fc:2c:
f6:39:58:84:8c:b3:84:d1:5f:06:d8:3a:9d:37:af:
26:9f:8c:b5:ae:c6:95:69:88:1a:18:1e:67:f3:f7:
63:a7:db:83:cb:71:02:17:7f:84:86:08:43:b5:c5:
87:a9:32:df:16:f3:0b:3e:8a:4a:d3:96:55:2d:ae:
7b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:30:8E:9B:E3:A8:5B:0F:49:01:F3:5E:7C:F1:FB:75:9B:49:FE:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.249.0/24
IPv6:
2a12:c8c0::/29
Signature Algorithm: sha256WithRSAEncryption
08:53:6c:3a:c6:d1:b0:37:7e:48:62:bf:5a:fa:84:a1:c9:a1:
46:10:f7:0a:22:a2:85:d4:85:88:06:d7:b1:35:b9:aa:c7:7e:
78:fb:17:94:60:ac:41:6c:de:bb:0a:1f:92:7d:21:01:69:03:
40:d0:5d:db:02:cc:e4:ab:54:2a:18:91:31:5e:1c:81:3d:e5:
51:a5:e0:fe:60:8e:f5:7f:42:ad:26:be:19:9e:fa:2b:4f:fd:
11:fc:59:88:b9:83:13:33:38:90:e9:24:66:28:d1:54:a8:a7:
b4:68:4c:8f:b5:47:67:88:b0:aa:ad:df:7d:e7:e6:23:5f:bd:
a5:ef:05:30:df:d0:4c:8c:3b:8f:a6:09:b3:5e:87:c8:03:64:
84:b2:7a:68:d0:cf:f7:7f:f9:59:74:b9:fe:6d:1c:f1:bb:09:
70:9d:4b:ff:75:bb:f2:8f:57:62:fe:0c:61:df:c7:8b:d4:53:
2e:43:cd:93:ff:45:79:23:6c:8f:51:8b:23:f6:22:65:f9:5c:
a9:c3:92:91:ca:8d:be:73:93:55:fc:6b:56:f4:b2:b8:dd:3d:
76:5d:b4:53:a4:2e:79:2b:c5:b0:d7:72:61:65:34:89:20:a3:
6d:77:c4:fb:27:8b:43:ce:24:98:e1:28:4d:dd:44:d4:7f:c4:
9c:a6:e7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:32:22 2024 by rpki-client on console-fra.rpki-client.org