Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
File: oWldVVgkHgSoctwTRomPLOpw3-c.cer (raw, json)
Hash identifier: F6EjW4Dju4jwGJYLNLv6t/R2QIlJ61TdBAosKABC4Wg=
Subject key identifier: A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC02BED36104566B5D0DC21946BB45
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 95.128.197.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:02:be:d3:61:04:56:6b:5d:0d:c2:19:46:bb:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1695d5558241e04a872dc1346898f2cea70dfe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:56:c4:1d:de:25:f6:95:61:72:eb:81:d8:6c:
56:9d:d3:4b:a5:76:d5:c5:77:f2:0c:c0:96:83:b5:
83:af:58:50:eb:3e:f1:86:ba:4f:83:2c:60:96:e5:
4b:eb:9b:b3:c1:a8:1e:81:5c:cd:e9:81:03:0f:b8:
d0:73:f2:56:36:54:9d:5b:61:59:52:4c:b5:88:6f:
c1:30:d8:86:60:b5:90:a4:a2:c0:93:c2:16:4c:df:
0c:5a:93:3b:22:59:ba:7b:a9:f3:35:7f:d5:ec:3c:
cf:33:97:63:32:53:81:a2:0b:75:79:95:4c:73:d5:
0c:b7:2c:56:92:0c:0c:04:02:7b:55:dd:d0:8c:f6:
94:00:0d:b7:e9:f9:14:d1:80:4b:d4:20:c5:cc:e3:
bc:b6:e9:b5:27:61:26:0d:5a:92:3b:b9:92:3e:62:
70:32:f8:5b:21:bb:ea:be:84:ac:dc:5a:20:69:56:
d6:eb:48:52:8d:c0:3b:e3:34:23:4e:20:dc:02:09:
57:1f:fd:11:ac:90:52:11:c9:6b:88:62:80:29:20:
2f:d1:77:07:12:ac:28:0e:94:36:2f:96:aa:9d:f5:
90:00:83:3d:58:cd:b8:c1:9e:30:a8:b7:45:a8:58:
fd:6a:d6:95:db:19:4b:05:b2:d2:76:2f:7d:49:9e:
a1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.197.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4c:31:00:41:d1:2d:89:bf:52:db:6a:22:ad:e1:11:5c:28:
f7:26:06:6e:3a:3a:f2:66:27:dc:8b:d6:1f:45:88:c3:bc:20:
3a:65:cb:a3:87:3f:89:83:94:8f:91:f3:32:46:68:74:ee:26:
f1:7d:7b:10:6d:e0:cc:ea:3c:98:ca:ae:b7:6b:32:89:7e:23:
76:0f:af:66:c4:10:4e:fb:77:ad:29:a9:b2:dc:06:2d:95:fd:
26:ff:80:c3:d0:54:54:20:b1:05:82:d2:d5:30:e4:94:fe:20:
02:37:74:7e:b3:2a:43:5b:44:53:72:fe:95:00:c5:f3:c6:4b:
79:c4:2e:d4:76:e5:aa:b1:0e:b4:f8:29:7a:ae:da:21:43:5f:
7f:b6:af:dd:38:c2:2b:8d:8d:9a:50:57:78:38:6d:db:1c:76:
60:80:4d:0f:83:21:e9:53:e9:28:14:a1:e6:55:47:f8:a5:05:
9f:7e:e3:a4:8e:fc:9a:cc:81:7a:ce:26:ca:ec:ea:e2:f8:69:
e9:10:35:85:84:9f:cc:22:b5:23:36:9c:56:85:21:b9:a1:d1:
e1:c9:56:bc:26:c3:6f:b8:6e:ba:03:80:b9:8f:2d:1f:80:a4:
ba:35:fb:58:3b:01:ab:29:2d:3e:6f:42:6e:9a:78:08:7f:12:
a7:ab:88:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:32 2025 by rpki-client