Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oFZPeYAZBRh04Czu4_0hy86rSuk.cer
File: oFZPeYAZBRh04Czu4_0hy86rSuk.cer (raw, json)
Hash identifier: NE7uMQRKNFost2mAsyPDwb4lhQFzuJBrAak9Cm1FkI4=
Subject key identifier: A0:56:4F:79:80:19:05:18:74:E0:2C:EE:E3:FD:21:CB:CE:AB:4A:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7CAE2A48E2AE244DB68196B5BB050
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 109.70.88.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ca:e2:a4:8e:2a:e2:44:db:68:19:6b:5b:b0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0564f798019051874e02ceee3fd21cbceab4ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:ff:ec:8e:32:36:31:fe:26:68:cc:5c:93:
88:c6:1b:57:e7:47:d4:3d:e7:7c:70:16:5c:4c:71:
94:2a:14:ce:7a:63:6c:2d:a0:3d:6d:57:22:58:31:
24:62:a4:0e:f9:e7:3d:69:83:6a:31:63:8d:87:57:
ac:ca:27:36:3f:f3:20:8a:70:a1:e5:3b:71:f5:43:
1d:79:3e:c3:31:a8:40:8c:2b:e5:3f:80:8b:b6:7d:
e6:a2:8d:ef:1c:b1:46:b2:56:a7:86:c5:43:e3:91:
52:59:af:29:cd:98:e6:5f:01:5b:52:e0:31:15:29:
8a:7c:6f:36:0e:73:5b:27:ee:a9:0f:ae:05:6c:15:
1b:27:c1:d7:65:37:45:8d:5a:8e:36:40:b4:14:86:
be:1c:6c:da:8f:60:1e:e8:86:24:a2:b0:55:92:21:
51:5e:a1:27:dd:0e:89:85:4b:61:71:d0:28:a2:a2:
aa:34:f0:1d:d4:66:79:7a:0b:a0:73:a8:54:53:23:
a5:65:9b:d4:71:c9:22:b6:f9:b1:71:f7:53:57:5d:
10:d7:58:61:5d:1a:5a:70:43:a1:85:4e:f4:10:be:
3c:79:28:3b:cb:fb:d3:f6:e6:e9:76:41:be:1a:f8:
ba:05:7c:e3:f4:32:bf:72:6c:5f:95:84:d4:dc:bf:
f6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:56:4F:79:80:19:05:18:74:E0:2C:EE:E3:FD:21:CB:CE:AB:4A:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.70.88.0/21
Signature Algorithm: sha256WithRSAEncryption
68:8c:d3:94:cf:8d:81:37:c7:ca:fe:41:b0:d6:de:01:90:2b:
24:7c:d9:d8:df:4f:2e:05:7b:8e:34:ef:60:c2:6f:af:6b:bc:
ff:29:ec:8a:43:3b:8d:52:a8:bc:13:24:94:e7:1c:b6:e1:bd:
38:10:b7:f6:04:e6:5c:eb:ee:1b:f1:3e:8d:f8:e5:db:50:13:
06:f9:de:50:55:74:85:0d:f5:e8:7e:43:2e:71:3b:7a:f2:37:
23:8c:a5:10:5c:63:d2:26:5b:e5:5d:65:61:1d:05:ad:89:c0:
19:4c:db:6a:c3:96:b7:e3:d4:e7:c8:bf:4e:7d:89:cf:03:5b:
54:64:d4:e1:82:c9:42:2b:e2:b8:c9:0e:92:29:cd:40:6f:72:
f0:b8:6d:41:df:50:d8:d1:e4:b5:45:ae:76:ce:86:1f:9c:be:
d4:1b:ab:21:7a:8b:9a:fe:c3:ba:13:f2:83:a4:72:cb:05:66:
8b:dd:15:1f:fa:54:32:b9:d3:5b:a5:bd:58:3e:d7:e1:fa:d1:
31:12:bf:e8:6f:55:ea:b1:3a:32:fd:ea:d8:8b:27:58:cd:eb:
dc:98:00:56:c5:17:b7:77:39:8f:4c:27:4e:1d:ad:49:93:b8:
6d:d8:89:21:75:92:0c:f3:b9:f3:18:4c:f5:21:46:4d:8f:57:
04:6b:e5:0a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzGt8ripI4q4kTbaBlrW7BQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAyOTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDU2NGY3OTgwMTkwNTE4NzRlMDJjZWVlM2ZkMjFjYmNlYWI0YWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgH/7I4yNjH+JmjMXJOIxhtX50fU
Ped8cBZcTHGUKhTOemNsLaA9bVciWDEkYqQO+ec9aYNqMWONh1esyic2P/MginCh
5Ttx9UMdeT7DMahAjCvlP4CLtn3moo3vHLFGslanhsVD45FSWa8pzZjmXwFbUuAx
FSmKfG82DnNbJ+6pD64FbBUbJ8HXZTdFjVqONkC0FIa+HGzaj2Ae6IYkorBVkiFR
XqEn3Q6JhUthcdAooqKqNPAd1GZ5egugc6hUUyOlZZvUcckitvmxcfdTV10Q11hh
XRpacEOhhU70EL48eSg7y/vT9ubpdkG+Gvi6BXzj9DK/cmxflYTU3L/2IwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFKBWT3mAGQUYdOAs7uP9IcvOq0rpMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhL2YwNTJl
ZS03NmIxLTQyMmYtODcxOS0yMTVlZWNiM2RmOTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvZjA1MmVl
LTc2YjEtNDIyZi04NzE5LTIxNWVlY2IzZGY5My8xL29GWlBlWUFaQlJoMDRDenU0
XzBoeTg2clN1ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDbUZYMA0GCSqGSIb3DQEBCwUAA4IBAQBojNOU
z42BN8fK/kGw1t4BkCskfNnY308uBXuONO9gwm+va7z/KeyKQzuNUqi8EySU5xy2
4b04ELf2BOZc6+4b8T6N+OXbUBMG+d5QVXSFDfXofkMucTt68jcjjKUQXGPSJlvl
XWVhHQWticAZTNtqw5a349TnyL9OfYnPA1tUZNThgslCK+K4yQ6SKc1Ab3LwuG1B
31DY0eS1Ra52zoYfnL7UG6sheoua/sO6E/KDpHLLBWaL3RUf+lQyudNbpb1YPtfh
+tExEr/ob1XqsToy/erYiydYzevcmABWxRe3dzmPTCdOHa1Jk7ht2IkhdZIM87nz
GEz1IUZNj1cEa+UK
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:03:56 2024 by rpki-client on console-ams.rpki-client.org