Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
File: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer (raw, json)
Hash identifier: XFkFZEM92WdKwIeNX4jY/lhKpNZ5vB9wZXSBLiUFP6g=
Subject key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421444D2E2ABC1222CB73DD4C48F25218
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a04:be40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4d:2e:2a:bc:12:22:cb:73:dd:4c:48:f2:52:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e19f6151a347c7922ac7cf469925344330d724f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:98:0f:8f:33:89:45:7e:69:7a:7d:ea:fb:53:
7e:06:3b:81:66:4d:57:9a:da:dc:9d:11:42:4d:43:
0a:0d:3e:d6:dd:fb:fe:04:3b:13:c2:11:6e:3a:8a:
7d:50:1f:8e:a4:fd:d5:e6:b2:c8:b9:07:0b:45:e1:
d6:ed:11:ff:46:eb:ca:99:4c:24:fa:f5:33:af:b4:
ad:2e:6e:0b:df:d8:c1:53:92:83:1a:78:e0:ad:92:
7a:8b:1d:17:b8:fa:bc:5f:4c:14:3f:65:42:a0:7c:
35:c5:d4:2c:b8:d2:12:b0:73:f7:47:ed:83:6a:b5:
3f:34:2a:b9:a2:69:0c:45:f8:f9:19:f8:dc:26:c3:
02:e1:77:dd:51:01:09:df:54:0f:63:79:6c:0a:c6:
de:30:70:16:dc:0c:58:76:c6:37:3f:97:d2:60:ae:
b0:01:4f:8f:36:7d:af:80:8e:bd:af:9d:fd:ad:5a:
ff:13:2d:14:7b:6f:98:44:7e:d6:1a:5d:04:04:7f:
eb:c1:fa:20:e9:a3:ed:d4:2f:c4:a0:30:60:73:36:
00:a9:9e:70:0c:6f:34:3b:2f:43:0d:a8:81:f2:14:
f1:e7:87:70:e6:f8:6d:21:c5:59:fb:d0:1a:28:fa:
b6:ee:02:57:26:1b:1d:cc:b0:bd:c5:00:36:2e:e5:
33:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:be40::/29
Signature Algorithm: sha256WithRSAEncryption
6e:88:e4:34:c0:37:7a:93:7b:08:d6:68:9d:73:e9:08:9c:56:
93:19:ce:0a:24:ef:5c:d2:31:5a:e2:10:f2:66:a5:76:20:b1:
e2:6c:69:77:eb:08:bd:79:9f:e0:af:78:88:7f:71:bc:a4:7f:
c2:67:ad:78:25:42:e7:d8:43:a5:f5:23:3e:57:9a:89:f1:a7:
58:46:6d:b2:9d:f0:40:5d:2c:58:da:d5:9f:3b:7b:43:4a:af:
fe:3a:6b:d8:8c:a0:1d:bd:04:54:8d:2f:fe:d7:64:81:bb:fc:
5a:b8:84:8b:81:7d:f7:9a:61:2e:f9:70:c1:dd:84:dd:38:de:
da:82:75:0f:30:5a:7d:c1:7f:8d:82:fd:ea:78:3c:55:9c:d6:
e2:b1:17:e3:8a:9d:2e:7d:d3:f4:ae:b7:a3:b1:4b:b0:5c:e1:
ba:f8:08:f2:5f:76:da:13:f6:74:d5:3f:d6:d1:52:87:ca:ff:
68:c2:ec:68:89:d6:f3:93:19:4b:84:5a:72:26:bf:f3:43:d1:
41:90:2e:d0:1c:c2:e7:e0:7c:ed:2b:cc:6f:50:76:06:46:29:
64:56:d0:26:6f:29:32:1f:7a:0e:17:57:bc:82:7b:e5:e3:96:
27:56:20:9d:6b:c1:4a:c4:d4:17:f5:23:d2:50:17:86:37:5a:
c3:2e:70:16
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZQhRE0uKrwSIstz3UxI8lIYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTlmNjE1MWEzNDdjNzkyMmFjN2NmNDY5OTI1MzQ0MzMwZDcyNGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pgPjzOJRX5pen3q+1N+BjuBZk1X
mtrcnRFCTUMKDT7W3fv+BDsTwhFuOop9UB+OpP3V5rLIuQcLReHW7RH/RuvKmUwk
+vUzr7StLm4L39jBU5KDGnjgrZJ6ix0XuPq8X0wUP2VCoHw1xdQsuNISsHP3R+2D
arU/NCq5omkMRfj5GfjcJsMC4XfdUQEJ31QPY3lsCsbeMHAW3AxYdsY3P5fSYK6w
AU+PNn2vgI69r539rVr/Ey0Ue2+YRH7WGl0EBH/rwfog6aPt1C/EoDBgczYAqZ5w
DG80Oy9DDaiB8hTx54dw5vhtIcVZ+9AaKPq27gJXJhsdzLC9xQA2LuUzSwIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFOGfYVGjR8eSKsfPRpklNEMw1yT3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzExNzlj
ZS0yNWQ5LTRmOTYtYjEwZi00MmQ0OTM5YTA1MTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvMTE3OWNl
LTI1ZDktNGY5Ni1iMTBmLTQyZDQ5MzlhMDUxOS8xLzRaOWhVYU5IeDVJcXg4OUdt
U1UwUXpEWEpQYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKgS+QDANBgkqhkiG9w0BAQsFAAOCAQEAbojk
NMA3epN7CNZonXPpCJxWkxnOCiTvXNIxWuIQ8maldiCx4mxpd+sIvXmf4K94iH9x
vKR/wmeteCVC59hDpfUjPleaifGnWEZtsp3wQF0sWNrVnzt7Q0qv/jpr2IygHb0E
VI0v/tdkgbv8WriEi4F995phLvlwwd2E3Tje2oJ1DzBafcF/jYL96ng8VZzW4rEX
44qdLn3T9K63o7FLsFzhuvgI8l922hP2dNU/1tFSh8r/aMLsaInW85MZS4Racia/
80PRQZAu0BzC5+B87SvMb1B2BkYpZFbQJm8pMh96DhdXvIJ75eOWJ1YgnWvBSsTU
F/Uj0lAXhjdawy5wFg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:15:10 2025 by rpki-client