Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
File: oODFkETIfj4t-hPL-ZAjruAS76A.cer (raw, json)
Hash identifier: 5iAWl4sC40TwWtfmgvInPTC1aDVP7sBvDNu8L+fWYJI=
Subject key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6973BC4C5E792FA6A925D587B5340
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57480
IP: 91.232.4.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:97:3b:c4:c5:e7:92:fa:6a:92:5d:58:7b:53:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4d:29:75:f4:9a:08:a0:2a:5b:41:c3:27:27:
35:3d:09:89:84:c2:c8:91:99:54:af:ad:07:74:ea:
17:b0:ca:aa:11:fa:5f:62:0f:f1:31:0b:60:a6:4a:
01:32:18:e1:ba:b0:ce:76:86:2e:04:40:b4:21:d5:
72:c5:32:58:da:4d:d9:2f:da:00:27:7c:15:16:d5:
ff:ce:4f:9a:32:b1:37:b9:6f:d7:63:2a:78:82:7e:
95:33:f8:3c:8c:57:aa:90:07:38:d4:e5:69:2b:e7:
fe:7a:cc:58:39:93:e7:a1:5d:be:b5:ae:4e:7a:f9:
fc:f9:65:25:a0:f3:e5:43:fc:17:c4:c2:22:99:34:
e1:71:09:b6:4a:c4:46:02:87:fc:fd:c8:59:3e:1d:
5e:e3:8f:52:d7:a8:2d:71:d7:0a:b8:b1:bd:d1:29:
22:01:75:e9:d8:a7:99:f7:47:fc:9d:2b:d8:c6:f3:
50:e8:42:7a:7c:ec:85:c2:d0:0d:5d:2b:61:94:f5:
55:71:1d:ea:77:4d:53:f2:09:ce:58:fb:5e:74:e8:
13:e3:ba:7c:bd:2c:db:43:6b:8c:b1:17:02:36:89:
00:31:da:ed:b6:db:5d:c3:52:27:d5:92:59:da:de:
fe:fb:17:62:fd:f2:e8:e5:37:2c:13:cc:f4:94:e5:
b6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.4.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57480
Signature Algorithm: sha256WithRSAEncryption
93:bc:e0:37:c8:82:d2:79:1d:91:5f:6b:ab:1e:54:f5:e4:51:
c2:e7:4f:af:d5:af:c7:32:52:c4:60:f4:94:34:05:15:e3:98:
ec:1a:aa:93:77:5d:99:06:bd:ad:89:68:2b:a4:50:46:36:c6:
94:19:c8:50:5d:b6:a1:eb:22:c7:c9:90:89:a5:40:c9:25:22:
41:f8:60:a5:93:bd:65:99:dd:c3:29:14:c4:ce:56:2b:35:9b:
30:de:a5:b6:6d:07:50:7d:c9:23:91:66:bb:63:02:06:9d:f8:
23:42:06:79:b4:3c:64:d8:da:65:dc:ed:b4:4c:48:11:62:4d:
aa:46:1d:0f:bf:8c:c9:6d:b4:02:28:ef:e2:6d:4c:06:bb:b1:
08:eb:eb:b4:39:ff:37:96:b5:94:eb:46:d8:51:57:f8:e8:60:
79:76:53:4e:6e:e8:cd:44:58:b4:0c:a5:19:f5:a0:bb:b8:1b:
e6:7c:a1:67:4e:de:d2:ec:de:45:2f:38:3a:c4:72:5b:7a:e7:
ea:eb:a0:73:cc:3e:3a:64:b4:9b:8f:38:35:31:2e:e6:6d:20:
aa:ef:99:3e:8d:5a:b5:91:72:60:fc:c6:1a:06:ee:99:e2:79:
47:e4:ce:4a:58:e6:ed:d5:67:f8:af:96:f1:04:45:53:82:d4:
94:70:be:d6
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzDtpc7xMXnkvpqkl1Ye1NAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGUwYzU5MDQ0Yzg3ZTNlMmRmYTEzY2JmOTkwMjNhZWUwMTJlZmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3k0pdfSaCKAqW0HDJyc1PQmJhMLI
kZlUr60HdOoXsMqqEfpfYg/xMQtgpkoBMhjhurDOdoYuBEC0IdVyxTJY2k3ZL9oA
J3wVFtX/zk+aMrE3uW/XYyp4gn6VM/g8jFeqkAc41OVpK+f+esxYOZPnoV2+ta5O
evn8+WUloPPlQ/wXxMIimTThcQm2SsRGAof8/chZPh1e449S16gtcdcKuLG90Ski
AXXp2KeZ90f8nSvYxvNQ6EJ6fOyFwtANXSthlPVVcR3qd01T8gnOWPtedOgT47p8
vSzbQ2uMsRcCNokAMdrttttdw1In1ZJZ2t7++xdi/fLo5TcsE8z0lOW2jQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFKDgxZBEyH4+LfoTy/mQI67gEu+gMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzL2IxNTky
ZC0zYTIzLTRmNDAtODFjOC0xNjAwYjc0MmI1ZGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvYjE1OTJk
LTNhMjMtNGY0MC04MWM4LTE2MDBiNzQyYjVkZC8xL29PREZrRVRJZmo0dC1oUEwt
WkFqcnVBUzc2QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBW+gEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDgiDANBgkqhkiG9w0BAQsFAAOCAQEAk7zgN8iC0nkdkV9rqx5U9eRRwudPr9Wv
xzJSxGD0lDQFFeOY7Bqqk3ddmQa9rYloK6RQRjbGlBnIUF22oesix8mQiaVAySUi
QfhgpZO9ZZndwykUxM5WKzWbMN6ltm0HUH3JI5Fmu2MCBp34I0IGebQ8ZNjaZdzt
tExIEWJNqkYdD7+MyW20Aijv4m1MBruxCOvrtDn/N5a1lOtG2FFX+OhgeXZTTm7o
zURYtAylGfWgu7gb5nyhZ07e0uzeRS84OsRyW3rn6uugc8w+OmS0m484NTEu5m0g
qu+ZPo1atZFyYPzGGgbumeJ5R+TOSljm7dVn+K+W8QRFU4LUlHC+1g==
-----END CERTIFICATE-----
Generated at Fri May 3 09:36:43 2024 by rpki-client on console-ams.rpki-client.org