Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
File: oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer (raw, json)
Hash identifier: tBGOhReJxSV4ZAaHSGZv96lI3CmK8truuvlxyTmmed8=
Subject key identifier: A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425223B40345689007BB0B06ECCF1FE69
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213083
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3b:40:34:56:89:00:7b:b0:b0:6e:cc:f1:fe:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1a4582562c3135bb52bdb96145e1ad03786b148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bc:8c:52:29:f9:09:ea:79:54:05:b6:fa:98:
5f:48:6b:55:5c:19:d9:50:fc:65:0b:af:91:ec:dc:
a6:e3:23:59:30:f3:a9:cf:c9:95:d9:a2:31:01:41:
36:66:87:47:bb:5b:0a:c2:e6:80:31:c2:28:33:ff:
61:f5:cf:a6:b7:65:ee:44:81:dd:9f:0f:a7:23:f4:
54:4e:78:a1:b4:d5:08:76:e0:c9:7d:a8:e1:1b:74:
4c:fe:41:25:fc:e7:31:c8:de:27:07:ce:dc:e1:9c:
cf:8e:b5:be:92:d6:1f:c7:df:05:55:e1:b9:53:f5:
5f:e7:08:2f:13:b3:28:74:45:5e:29:e0:24:98:08:
5d:19:e7:2c:73:38:3c:7f:e9:01:85:2b:b8:53:dd:
4b:61:5b:75:a0:c8:19:eb:0e:e9:a0:c7:6b:61:8e:
a3:b9:38:98:bf:09:fe:67:e9:3f:24:89:cb:25:65:
ec:0d:f8:e6:62:64:9e:03:40:71:8e:22:df:89:37:
d5:a7:e8:71:8f:b8:42:ee:d5:01:75:75:28:80:0e:
88:57:24:1c:19:14:69:43:ab:69:b0:d6:b9:87:73:
6a:01:81:bc:de:f6:77:3f:de:73:ee:b1:b2:fc:66:
31:da:db:a2:03:5d:46:7e:26:67:09:cf:03:9b:96:
1b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213083
Signature Algorithm: sha256WithRSAEncryption
83:46:6d:04:a1:30:d3:05:d7:91:49:44:d2:96:66:21:58:27:
10:9c:39:48:62:db:ea:2d:ee:30:33:e3:dc:88:97:21:ca:18:
43:3e:75:7c:46:0e:d3:51:99:92:28:9a:06:46:de:78:3a:59:
8a:32:c1:31:ec:03:af:64:93:3d:e4:65:13:67:f9:58:73:85:
07:a5:3f:bf:d5:92:1b:03:86:c3:35:13:1d:a0:24:14:a9:50:
6d:9d:b6:fc:5b:d4:6e:ca:3a:e3:a9:a5:5c:aa:b9:34:49:dc:
3e:3a:b4:45:b7:2c:32:b1:e7:fb:6b:67:fe:c6:ae:46:5d:42:
a3:81:77:76:93:c2:68:eb:c8:bc:60:10:61:02:9f:d9:52:1f:
1d:35:40:1a:c0:59:56:1e:e1:29:bf:43:24:60:93:37:df:95:
ff:7d:c4:88:fb:d8:a8:54:ff:16:69:3b:34:b8:77:f6:21:c2:
b0:83:2f:c8:da:26:56:0a:73:df:80:c2:71:b9:29:5d:1c:6b:
9f:e0:b8:25:d5:21:87:20:48:03:f1:76:d3:6f:29:46:7a:f4:
8a:1d:17:96:0a:fc:5f:8b:81:f3:ea:eb:7f:a5:49:82:43:55:
1d:f6:68:30:c2:5d:d5:1b:fc:37:c1:cd:38:72:10:14:c7:23:
33:70:d0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:07 2025 by rpki-client