Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
File: CMuJoREU774OHiVQ7Nozb9eS7F8.cer (raw, json)
Hash identifier: +cey1XU6csXnmUdlCGvg42a2jltM1SdYQY1+QCjfViM=
Subject key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E3B9F5C0B18F06557B52BEEE9221B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.127.228.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3b:9f:5c:0b:18:f0:65:57:b5:2b:ee:e9:22:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a0:95:b8:09:7f:85:f8:b0:de:77:4f:21:d7:
9d:92:56:99:00:16:e5:c0:38:a8:07:28:cf:09:76:
ee:1f:e2:c2:f1:6e:da:6e:e9:7f:9b:36:f4:9f:11:
ea:dc:94:7a:d8:62:ec:fd:fa:88:1c:10:9d:47:ec:
db:79:74:7e:48:8d:e4:e8:a0:18:4e:0f:ec:dc:9a:
94:db:a1:27:9d:59:e4:09:35:05:e8:c8:75:cd:8a:
fb:89:43:7c:f4:b1:8d:59:0b:a3:46:b9:ca:08:5e:
2f:0a:fa:02:44:58:dd:40:41:43:ce:d9:e4:a6:74:
08:44:91:ec:20:02:43:a3:7d:5c:99:af:35:83:47:
a8:fc:01:9d:3c:2b:4f:36:de:d3:51:ed:47:48:28:
86:d9:39:8a:1b:ee:cb:30:dc:0a:85:60:b9:a6:b7:
59:7b:31:b2:28:0c:63:96:fb:38:4a:54:69:c8:e6:
32:f6:c9:07:09:d5:12:0f:1d:ac:22:ef:fc:e8:7c:
03:bb:83:11:35:1a:9f:f7:c3:a8:7b:aa:e9:04:0a:
b4:24:96:8b:5b:52:c1:5d:1d:c9:bc:e7:3e:3e:e6:
9f:80:08:05:77:6b:c9:6f:a2:52:a8:a8:d9:4d:e9:
22:9a:60:51:5e:d6:46:c1:0b:b4:67:98:e6:c1:16:
86:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.228.0/24
Signature Algorithm: sha256WithRSAEncryption
44:7f:ce:d8:e3:06:49:ab:67:ae:1e:90:60:ff:85:3a:b5:c4:
fd:a6:84:8e:2f:07:ba:93:b3:4e:f1:4a:f0:a2:43:f3:29:a4:
90:e4:f5:61:fa:97:88:7e:c0:36:95:a0:40:b6:af:da:f0:b0:
9a:3f:e6:fc:69:fe:69:45:d1:48:3a:fe:eb:f4:db:21:9b:39:
70:94:95:ac:4e:86:fc:c1:41:ed:67:45:d5:03:f5:bb:58:c3:
d5:dc:7a:e3:ca:30:2a:c9:cd:43:e1:f8:37:31:cc:ca:9b:71:
2d:6a:b7:25:92:18:47:b8:20:5c:56:48:fa:76:03:49:e5:8b:
11:f4:8b:12:f5:91:c1:72:14:52:bb:8f:b3:f9:1f:d9:9b:e1:
10:3d:2c:92:c3:dc:5c:b3:11:71:de:f7:ec:71:f8:51:e7:bf:
15:87:cb:1b:53:89:3a:c6:6f:8b:96:e7:f6:a6:98:73:ed:59:
7a:88:b8:d5:bd:84:76:ad:0e:54:77:5c:77:b5:70:bb:1c:e9:
7f:01:f8:a2:f2:c0:52:c6:a6:0a:a0:f0:00:64:a0:82:cb:ec:
d7:34:6a:06:86:a0:cf:64:08:ff:f8:26:f8:94:45:7c:fe:79:
d4:6e:0e:5a:aa:eb:08:8a:63:34:3f:4d:9f:30:ef:14:57:af:
8c:ae:8f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:37:02 2025 by rpki-client