Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
File: 59nPsHjtpYFvyAnpjCXLcZY-dbc.cer (raw, json)
Hash identifier: Rhs0LerIdIhpECa7KNXeKOnKoBx10LazHoOPo56KjQY=
Subject key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7240CFE7E66E89B363D5C0B2F482A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.64.96.0/22
IP: 2a04:f880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:24:0c:fe:7e:66:e8:9b:36:3d:5c:0b:2f:48:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:8f:e1:e2:34:43:69:17:48:a2:3a:21:85:
ae:c4:1b:bd:e3:04:b2:6a:cf:da:b2:09:b1:a5:56:
ea:bf:bb:ea:46:3b:32:cb:d7:8d:09:27:47:13:c0:
24:15:57:86:01:8b:74:4b:71:3c:ad:46:22:57:f6:
dd:e3:f4:ad:b0:67:75:fd:34:72:f2:28:0c:51:6e:
d5:b8:86:17:db:2d:af:ed:e6:39:13:85:de:28:83:
2f:3d:ec:56:5c:8b:aa:8e:27:08:76:4e:01:a1:48:
e0:9e:db:2b:be:55:7e:ea:87:ba:0b:78:d2:16:35:
81:ac:66:6e:b1:f8:bf:b4:dc:f7:ba:b7:1a:23:aa:
92:70:38:1c:f3:ec:10:b1:c3:b3:46:62:f5:38:25:
80:52:97:b6:84:67:b2:ee:a4:68:ec:37:a0:e3:68:
97:1d:1a:1f:ca:56:31:36:34:6f:4f:58:53:5f:99:
ef:28:ba:8e:15:6c:d6:cf:8f:c3:2e:60:81:83:0d:
90:fd:8c:ed:5a:f3:12:71:35:83:cc:9a:6c:68:5e:
b4:5b:62:39:4d:fa:9d:9c:2d:74:a5:95:21:ce:85:
e3:e7:19:62:66:9c:a6:fd:df:e0:d1:fe:d6:47:e2:
07:07:1d:2e:67:58:3a:3e:53:49:e4:7a:a0:2e:bf:
3f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.96.0/22
IPv6:
2a04:f880::/29
Signature Algorithm: sha256WithRSAEncryption
53:5a:0a:7f:48:b5:58:47:9e:a4:7f:26:38:dc:b3:58:6b:ea:
96:2a:0a:e5:34:83:87:d0:61:6f:44:50:f1:8b:e3:25:2c:1a:
1d:54:79:21:22:a9:c1:48:a6:44:d2:7d:6e:20:a9:1e:c3:cb:
a7:64:6b:eb:e3:86:8e:06:9a:57:de:4c:36:93:c3:f0:af:3c:
35:88:0d:59:4b:84:78:75:3f:1a:69:4c:4b:9b:51:15:ac:07:
a3:43:51:69:9d:e2:d6:6a:7b:de:f0:34:d3:00:68:05:c2:2b:
4f:f6:92:4a:78:ba:2b:28:33:d5:49:b6:85:44:6e:30:b3:52:
fc:93:73:2b:6b:17:14:4b:f8:6c:d4:5d:49:6c:da:9f:77:13:
2f:90:9a:20:65:92:46:cb:d0:e4:ca:ba:71:95:4b:60:d6:7b:
20:3a:7e:8c:ff:ef:38:72:46:d1:b6:50:5e:55:9b:ca:af:61:
4c:3a:65:5e:8e:c5:0e:a0:48:74:07:be:5d:87:df:7c:5f:a3:
1e:20:df:8c:25:7c:6e:bc:9d:47:7d:d7:78:5d:64:32:4b:72:
08:03:b8:0a:d1:af:03:b3:06:8e:dd:87:6c:ea:4d:f8:6e:54:
8f:66:23:db:1f:4b:6b:9a:9f:33:8f:a9:01:a6:e8:b5:14:c3:
22:5f:67:f2
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQj1yQM/n5m6Js2PVwLL0gqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2Q5Y2ZiMDc4ZWRhNTgxNmZjODA5ZTk4YzI1Y2I3MTk2M2U3NWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS+P4eI0Q2kXSKI6IYWuxBu94wSy
as/asgmxpVbqv7vqRjsyy9eNCSdHE8AkFVeGAYt0S3E8rUYiV/bd4/StsGd1/TRy
8igMUW7VuIYX2y2v7eY5E4XeKIMvPexWXIuqjicIdk4BoUjgntsrvlV+6oe6C3jS
FjWBrGZusfi/tNz3urcaI6qScDgc8+wQscOzRmL1OCWAUpe2hGey7qRo7Deg42iX
HRofylYxNjRvT1hTX5nvKLqOFWzWz4/DLmCBgw2Q/YztWvMScTWDzJpsaF60W2I5
TfqdnC10pZUhzoXj5xliZpym/d/g0f7WR+IHBx0uZ1g6PlNJ5HqgLr8/vQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFOfZz7B47aWBb8gJ6Ywly3GWPnW3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzAwMGVh
Ny1jOWY0LTRlYmItYjliMS1mZWVlN2MyOWQ0ZGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvMDAwZWE3
LWM5ZjQtNGViYi1iOWIxLWZlZWU3YzI5ZDRkZS8xLzU5blBzSGp0cFlGdnlBbnBq
Q1hMY1pZLWRiYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuUBgMA0EAgACMAcDBQMqBPiAMA0GCSqGSIb3
DQEBCwUAA4IBAQBTWgp/SLVYR56kfyY43LNYa+qWKgrlNIOH0GFvRFDxi+MlLBod
VHkhIqnBSKZE0n1uIKkew8unZGvr44aOBppX3kw2k8Pwrzw1iA1ZS4R4dT8aaUxL
m1EVrAejQ1FpneLWanve8DTTAGgFwitP9pJKeLorKDPVSbaFRG4ws1L8k3MraxcU
S/hs1F1JbNqfdxMvkJogZZJGy9DkyrpxlUtg1nsgOn6M/+84ckbRtlBeVZvKr2FM
OmVejsUOoEh0B75dh998X6MeIN+MJXxuvJ1Hfdd4XWQyS3IIA7gK0a8DswaO3Yds
6k34blSPZiPbH0trmp8zj6kBpui1FMMiX2fy
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:23:59 2025 by rpki-client