Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
File: ozMRTL_Gv2aDccVofumKRC_Y6jY.cer (raw, json)
Hash identifier: j4OH117fUMyZmaxBedu/kL7kMn7805QmqARhX3Wc5OU=
Subject key identifier: A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26CFF6F56F377056DC234845E1CAB76
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35228
IP: 87.194.0.0/16
IP: 93.97.0.0/16
IP: 2a00:14c8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:ff:6f:56:f3:77:05:6d:c2:34:84:5e:1c:ab:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:68:b7:0e:59:5b:a3:0d:02:01:46:fe:d4:
66:de:1b:e6:31:7a:0d:71:6f:1a:c6:81:e9:10:8f:
bd:07:d6:82:ab:7e:67:8b:7c:55:c6:bb:aa:83:ec:
bf:21:78:72:cb:65:eb:09:ec:3d:60:bf:c1:e4:43:
03:c6:a0:9c:a5:6a:93:bf:ca:51:6b:97:d1:72:17:
35:8c:b2:07:1f:b5:ce:fc:f0:f0:b6:79:1a:0b:67:
b0:3f:75:21:b3:60:bc:79:59:98:d1:6a:e7:e8:55:
63:c0:31:05:6c:8d:24:2a:cb:45:d3:03:8d:e5:24:
73:80:8f:15:c8:05:f3:de:01:a7:0a:15:aa:5e:f8:
4d:a6:e6:3c:2d:c7:6e:5d:38:05:af:53:24:e8:31:
63:8e:ba:46:69:eb:e2:7c:e9:49:fd:c8:ae:66:db:
85:1c:09:79:e8:3f:29:62:ac:85:84:c9:c5:df:af:
f0:98:0e:cb:c5:49:2b:de:d1:59:40:e6:0f:bf:1b:
c9:ce:e7:86:16:15:58:40:65:92:02:45:23:58:13:
74:2a:61:6a:c0:a1:d4:d8:88:90:e5:fb:df:fa:dc:
73:ad:14:38:ca:78:44:58:22:23:1d:21:e4:8b:3d:
85:54:66:af:2d:e4:6d:b9:e4:94:50:51:b6:85:dd:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.194.0.0/16
93.97.0.0/16
IPv6:
2a00:14c8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35228
Signature Algorithm: sha256WithRSAEncryption
40:d2:fa:0a:29:ba:ea:fe:12:8f:81:fd:5e:f5:49:20:98:0e:
02:81:ed:95:8e:39:9c:60:97:10:68:4b:70:0b:18:83:2e:12:
f2:14:f4:0f:23:b0:71:de:0d:5f:22:4d:7e:d7:e8:e3:49:64:
b4:f9:5f:a0:45:9f:0c:89:1a:01:a8:5c:14:b2:5b:cc:8a:17:
35:23:c6:13:78:8d:cc:54:c9:4d:14:1b:ce:5b:2e:88:b6:f7:
f3:85:fa:df:a3:03:ca:ba:29:62:a6:6a:ef:66:52:94:a8:df:
35:5c:0d:7d:10:75:69:20:13:78:ff:a1:7b:ab:ae:ba:cf:d8:
61:4e:a9:13:d8:1a:56:76:1f:60:94:e4:97:bd:e1:49:82:73:
bc:89:2b:d3:da:66:d3:2b:e4:f1:d2:47:41:33:35:76:49:19:
70:61:ee:0c:5f:44:d4:36:61:f4:fc:48:45:88:19:6c:52:b5:
71:29:2a:42:e9:03:d5:d4:75:bd:bf:df:85:0d:b9:fb:56:42:
12:0c:93:cf:e5:14:90:2e:c6:36:ca:eb:39:6d:be:65:6a:50:
bc:ce:19:b0:32:15:4c:8f:e8:26:97:fa:2b:8d:58:d0:40:a5:
00:8c:8a:b0:6c:31:e1:52:c5:f0:cb:e3:00:1e:23:5d:80:a9:
a3:b7:1b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:59:00 2024 by rpki-client on console-fra.rpki-client.org