Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
File: oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer (raw, json)
Hash identifier: syBsbGCtu6NK0zE3SDV/aU6CZoQ8TNNQKaPIuEcbgtc=
Subject key identifier: A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B71F6539BD1795FF3EE896D2857B19
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213083
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:1f:65:39:bd:17:95:ff:3e:e8:96:d2:85:7b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1a4582562c3135bb52bdb96145e1ad03786b148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bc:8c:52:29:f9:09:ea:79:54:05:b6:fa:98:
5f:48:6b:55:5c:19:d9:50:fc:65:0b:af:91:ec:dc:
a6:e3:23:59:30:f3:a9:cf:c9:95:d9:a2:31:01:41:
36:66:87:47:bb:5b:0a:c2:e6:80:31:c2:28:33:ff:
61:f5:cf:a6:b7:65:ee:44:81:dd:9f:0f:a7:23:f4:
54:4e:78:a1:b4:d5:08:76:e0:c9:7d:a8:e1:1b:74:
4c:fe:41:25:fc:e7:31:c8:de:27:07:ce:dc:e1:9c:
cf:8e:b5:be:92:d6:1f:c7:df:05:55:e1:b9:53:f5:
5f:e7:08:2f:13:b3:28:74:45:5e:29:e0:24:98:08:
5d:19:e7:2c:73:38:3c:7f:e9:01:85:2b:b8:53:dd:
4b:61:5b:75:a0:c8:19:eb:0e:e9:a0:c7:6b:61:8e:
a3:b9:38:98:bf:09:fe:67:e9:3f:24:89:cb:25:65:
ec:0d:f8:e6:62:64:9e:03:40:71:8e:22:df:89:37:
d5:a7:e8:71:8f:b8:42:ee:d5:01:75:75:28:80:0e:
88:57:24:1c:19:14:69:43:ab:69:b0:d6:b9:87:73:
6a:01:81:bc:de:f6:77:3f:de:73:ee:b1:b2:fc:66:
31:da:db:a2:03:5d:46:7e:26:67:09:cf:03:9b:96:
1b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213083
Signature Algorithm: sha256WithRSAEncryption
15:cc:56:74:16:ec:54:a6:4a:55:bc:fd:a1:62:5b:69:7e:9f:
07:b5:d6:7a:c7:07:42:47:a6:af:4c:a0:15:f5:bf:77:1d:6c:
5d:4b:e0:7a:e9:1d:55:09:50:63:75:d7:16:9e:46:8d:f5:f7:
28:f9:7c:e7:28:50:04:e0:80:df:20:2b:dd:cb:da:e8:0c:00:
7e:ee:c5:41:4b:93:03:2a:e5:6d:f0:c8:54:b1:fe:2e:af:1f:
c1:9e:7e:09:4d:d7:50:c0:8b:e2:ab:08:be:86:9d:3b:b6:1d:
a6:92:64:4c:f4:63:52:7a:7a:bd:9b:d2:d2:b5:7f:af:90:1a:
a2:d8:50:ff:53:3c:8d:13:f4:85:52:ff:9b:94:35:10:af:8f:
0b:c0:d5:ce:1d:42:9a:64:98:0d:a1:05:9f:a4:f1:5f:75:15:
e5:d7:e0:80:1d:ec:25:92:71:3f:c9:a4:24:94:d9:5e:b9:55:
ce:b1:d1:c3:ad:23:35:a7:11:48:67:02:3f:5d:ce:ed:16:97:
6f:09:1c:a0:1e:00:fe:bd:5f:1d:fb:3d:86:d6:56:99:e0:a9:
86:d5:b8:f7:1b:6a:4a:57:d2:3e:b2:1f:50:d7:7c:b0:32:12:
ef:01:06:c7:97:42:7e:dc:5d:7e:f2:c0:6d:57:ac:6e:15:34:
23:82:eb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:14:17 2024 by rpki-client on console-ams.rpki-client.org