Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer
File: OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer (raw, json)
Hash identifier: bH5CCOYiZ+RAJBFpAlkPE9a49V3djksWTaOGm6hx8mo=
Subject key identifier: 3B:30:8E:9B:E3:A8:5B:0F:49:01:F3:5E:7C:F1:FB:75:9B:49:FE:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6EBF39C30291E230C5A80416F46E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.53.249.0/24
IP: 2a12:c8c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:eb:f3:9c:30:29:1e:23:0c:5a:80:41:6f:46:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b308e9be3a85b0f4901f35e7cf1fb759b49fee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:06:aa:44:c1:1e:d5:20:d4:7e:27:c8:b0:de:
35:32:29:ab:3f:3b:b6:85:4c:31:f4:73:5d:57:32:
7a:99:7d:bb:c7:fc:c7:c9:2a:10:cc:6a:3a:e6:fa:
36:b4:39:76:bc:5e:12:37:6c:49:48:24:da:c3:c1:
72:a4:f8:68:fd:c1:58:9c:8d:7a:24:4e:61:96:fc:
a2:4a:32:45:88:39:12:1f:e4:8e:ef:5b:e1:a8:8d:
e7:ba:9f:f7:c6:f7:3c:6d:1f:b0:7c:c4:62:db:d5:
48:2e:ff:21:d4:3a:f4:93:3b:f3:28:bf:c2:cb:90:
67:40:79:c4:89:79:28:c0:db:64:f2:b7:a5:e9:9b:
c8:40:ed:ae:95:85:02:c7:0b:65:0e:12:89:b8:78:
ac:67:53:0d:3f:21:b9:d2:8f:f2:4f:06:d9:69:6d:
9e:e3:df:eb:6d:df:2e:bc:79:97:70:fc:2a:ab:97:
0e:2a:3f:e5:99:2c:94:7e:63:9b:fd:2c:9c:fc:2c:
f6:39:58:84:8c:b3:84:d1:5f:06:d8:3a:9d:37:af:
26:9f:8c:b5:ae:c6:95:69:88:1a:18:1e:67:f3:f7:
63:a7:db:83:cb:71:02:17:7f:84:86:08:43:b5:c5:
87:a9:32:df:16:f3:0b:3e:8a:4a:d3:96:55:2d:ae:
7b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:30:8E:9B:E3:A8:5B:0F:49:01:F3:5E:7C:F1:FB:75:9B:49:FE:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.249.0/24
IPv6:
2a12:c8c0::/29
Signature Algorithm: sha256WithRSAEncryption
31:82:85:42:0d:e5:52:a0:ff:4e:f2:fb:19:95:95:12:e3:d5:
d2:37:e0:1a:87:91:27:fe:ba:32:73:c2:06:53:58:b2:57:33:
89:d8:22:3f:e0:16:76:f3:ec:09:87:e7:a6:02:79:f7:cb:1a:
0d:71:2c:8c:af:5a:9e:95:9d:8e:05:31:82:56:b7:b0:19:db:
3e:ee:9b:5b:c8:47:5e:e3:92:74:f7:06:01:dc:78:51:6c:c5:
4c:32:4d:43:17:78:e2:b2:a1:46:d5:8c:29:08:01:05:15:35:
95:b8:f5:b9:04:60:c8:c3:60:5a:8c:28:53:f4:77:8d:81:24:
20:57:3d:8e:1a:75:0d:73:b4:9a:68:1f:cc:6e:0f:19:04:fd:
71:57:04:86:08:9a:45:96:7f:c7:f4:34:e3:57:84:36:12:78:
e3:bc:25:51:0c:05:db:cb:5c:94:86:41:c2:d6:85:a3:1b:d3:
64:fe:61:de:eb:d0:4b:a2:38:8c:f5:f5:01:a4:24:39:41:d2:
bd:98:bc:79:42:d3:b0:67:50:d7:3e:f1:d7:6b:61:4d:6e:2b:
f8:28:8d:0a:6f:77:6e:bd:cf:ae:0e:e9:cb:08:07:02:ea:1d:
5f:d6:6c:77:23:93:0b:d7:56:fe:80:dd:9a:4b:05:3d:1b:2f:
a2:0e:45:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:02 2025 by rpki-client