Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p2-GjYBumASUxtBaI5XRDKftwak.cer
File: p2-GjYBumASUxtBaI5XRDKftwak.cer (raw, json)
Hash identifier: nG3VLUfZGzi+GZDdjCJhIKWXAj7X/E9IQzl7DYw+Yjc=
Subject key identifier: A7:6F:86:8D:80:6E:98:04:94:C6:D0:5A:23:95:D1:0C:A7:ED:C1:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5EA3271ACFCC70EA62AE769082C98
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://oto.wakuwaku.ne.jp/pki/202400/3/A76F868D806E980494C6D05A2395D10CA7EDC1A9.mft
caRepository: rsync://oto.wakuwaku.ne.jp/pki/202400/3/
Notify URL: https://oto.wakuwaku.ne.jp/pki/oshirase.xml
Certificate not before: Wed 01 Jan 2025 07:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202996
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ea:32:71:ac:fc:c7:0e:a6:2a:e7:69:08:2c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a76f868d806e980494c6d05a2395d10ca7edc1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:ef:dc:34:86:0f:f6:eb:46:43:32:e0:34:
bf:95:e1:68:2d:b8:e1:06:63:5c:38:b1:d0:18:ef:
b5:68:78:a8:85:d3:1e:6a:aa:69:10:e2:a5:bf:1f:
c0:55:83:11:98:26:8d:55:c3:33:56:44:0b:2e:cb:
58:70:dc:a4:9c:03:48:4c:96:75:b3:e4:9b:88:5d:
4c:d7:09:89:50:4b:0b:39:24:74:b7:c2:d9:88:fe:
60:aa:47:33:12:39:ae:40:0a:a5:6f:21:fc:31:fd:
db:b5:d7:d5:8f:d8:15:dd:6a:13:9e:5e:9a:21:74:
ed:ae:8a:fc:d0:5c:ee:67:c4:17:a4:0d:47:cb:b6:
55:b8:3f:96:a8:e6:3d:7b:56:17:c8:dc:88:fa:10:
4c:8b:b3:ef:16:93:57:51:66:e3:f1:66:8c:b0:41:
b4:43:8a:f9:59:ec:82:f4:68:f5:f1:b0:de:56:4a:
f2:55:7f:b8:f4:3a:2e:0f:f9:7f:55:b5:fa:35:b7:
a3:d4:d0:75:71:4f:bc:2b:00:17:5e:a5:79:93:59:
98:d4:de:8b:5b:c6:fa:7b:1d:cb:9e:d0:9b:38:77:
02:57:6c:50:84:34:9e:ee:e3:09:e6:9f:a2:49:e3:
68:b2:68:c9:34:9a:18:c5:2a:c1:13:d5:a3:fa:69:
a0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6F:86:8D:80:6E:98:04:94:C6:D0:5A:23:95:D1:0C:A7:ED:C1:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://oto.wakuwaku.ne.jp/pki/202400/3/
RPKI Manifest - URI:rsync://oto.wakuwaku.ne.jp/pki/202400/3/A76F868D806E980494C6D05A2395D10CA7EDC1A9.mft
RPKI Notify - URI:https://oto.wakuwaku.ne.jp/pki/oshirase.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202996
Signature Algorithm: sha256WithRSAEncryption
79:c1:2e:ae:9f:39:75:06:5e:83:13:a0:13:b7:be:82:6f:32:
15:98:86:28:8c:d3:f1:d0:49:2e:31:f6:e8:8e:77:8e:75:ff:
4c:de:1e:a9:ba:0b:94:c5:45:ca:ae:62:fd:31:6c:4c:26:22:
9c:16:66:e3:68:19:f9:6e:5c:f4:53:af:29:5f:a9:b9:05:c7:
0c:be:5e:74:c1:09:49:35:ed:b9:40:a3:7e:fd:bc:d8:1a:8a:
3e:48:3b:81:73:9c:ea:79:9d:ce:fc:c7:a1:6d:a5:82:6a:90:
9f:a6:1e:eb:c9:09:c8:dc:8d:ac:bb:d6:ad:66:7c:99:84:83:
be:9b:42:a5:62:71:fd:a7:98:bb:95:02:4d:b7:55:0b:e6:77:
8c:ed:e0:50:17:e1:75:d5:13:9f:40:db:7a:87:dc:01:6f:2a:
8e:34:cf:67:2b:2b:8f:60:70:36:55:47:d9:25:57:7a:f0:0b:
12:23:eb:62:79:55:3f:1b:15:c7:4c:de:30:4f:91:d7:70:7f:
2f:04:cb:1c:27:d7:1f:66:bb:bc:f3:4c:97:2d:f2:6c:95:01:
e7:4e:8f:2e:8a:a8:f3:62:10:69:d6:56:95:06:08:45:fe:2a:
9b:67:81:57:01:06:aa:1b:ed:ae:0a:61:5e:41:27:06:29:cc:
d6:32:17:3e
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZQg1eoycaz8xw6mKudpCCyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzZmODY4ZDgwNmU5ODA0OTRjNmQwNWEyMzk1ZDEwY2E3ZWRjMWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr/v3DSGD/brRkMy4DS/leFoLbjh
BmNcOLHQGO+1aHiohdMeaqppEOKlvx/AVYMRmCaNVcMzVkQLLstYcNyknANITJZ1
s+SbiF1M1wmJUEsLOSR0t8LZiP5gqkczEjmuQAqlbyH8Mf3btdfVj9gV3WoTnl6a
IXTtror80FzuZ8QXpA1Hy7ZVuD+WqOY9e1YXyNyI+hBMi7PvFpNXUWbj8WaMsEG0
Q4r5WeyC9Gj18bDeVkryVX+49DouD/l/VbX6Nbej1NB1cU+8KwAXXqV5k1mY1N6L
W8b6ex3LntCbOHcCV2xQhDSe7uMJ5p+iSeNosmjJNJoYxSrBE9Wj+mmgeQIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFKdvho2AbpgElMbQWiOV0Qyn7cGpMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgeEGCCsGAQUFBwELBIHUMIHRMDQGCCsGAQUFBzAFhihyc3lu
YzovL290by53YWt1d2FrdS5uZS5qcC9wa2kvMjAyNDAwLzMvMGAGCCsGAQUFBzAK
hlRyc3luYzovL290by53YWt1d2FrdS5uZS5qcC9wa2kvMjAyNDAwLzMvQTc2Rjg2
OEQ4MDZFOTgwNDk0QzZEMDVBMjM5NUQxMENBN0VEQzFBOS5tZnQwNwYIKwYBBQUH
MA2GK2h0dHBzOi8vb3RvLndha3V3YWt1Lm5lLmpwL3BraS9vc2hpcmFzZS54bWww
WQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAxj0
MA0GCSqGSIb3DQEBCwUAA4IBAQB5wS6unzl1Bl6DE6ATt76CbzIVmIYojNPx0Eku
MfbojneOdf9M3h6puguUxUXKrmL9MWxMJiKcFmbjaBn5blz0U68pX6m5BccMvl50
wQlJNe25QKN+/bzYGoo+SDuBc5zqeZ3O/MehbaWCapCfph7ryQnI3I2su9atZnyZ
hIO+m0KlYnH9p5i7lQJNt1UL5neM7eBQF+F11ROfQNt6h9wBbyqONM9nKyuPYHA2
VUfZJVd68AsSI+tieVU/GxXHTN4wT5HXcH8vBMscJ9cfZru880yXLfJslQHnTo8u
iqjzYhBp1laVBghF/iqbZ4FXAQaqG+2uCmFeQScGKczWMhc+
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:08 2025 by rpki-client