Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer (raw, json)
Hash identifier: jtFULKDs84fcisszM2W5GVmtiiieWsRfMEmKZQkVZjg=
Subject key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214393E2C98811240197F4DF231C0ABC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 160.217.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:93:e2:c9:88:11:24:01:97:f4:df:23:1c:0a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:15:c0:5f:43:33:4b:74:2a:82:7e:1c:1b:
ca:8e:d4:57:bf:43:a3:43:17:b9:e2:be:9e:12:ed:
f7:b6:78:13:7e:87:02:50:44:3b:45:1a:51:35:0d:
1f:af:0b:29:ab:09:b0:a9:e5:db:e4:af:2f:80:58:
fa:3f:35:96:ab:dc:a2:b9:6d:6e:df:5e:93:5b:ef:
91:54:73:8b:3e:0a:4e:e8:2e:75:5c:2c:bc:0f:01:
39:16:c4:e8:88:14:cc:b5:dd:b9:32:48:10:1b:d1:
db:cd:e7:24:12:4d:4d:2f:a9:15:1f:33:59:23:2f:
24:72:58:1b:ca:c7:82:60:d0:99:19:c5:27:dc:4e:
ce:d4:dd:f1:fe:e8:a5:fa:17:93:e4:dd:1c:de:d9:
2c:95:58:68:f9:6a:5a:85:05:65:14:7e:95:ae:91:
b2:7a:5f:ad:12:4f:39:8f:ae:1a:1b:0e:86:43:db:
af:c5:47:4a:03:6f:93:9e:0c:6d:33:ba:7d:41:2e:
c8:67:42:0f:02:f3:c2:6f:eb:d9:70:11:33:26:38:
d9:ec:cd:9d:21:59:eb:da:6d:5b:55:8b:3d:ab:c4:
10:7b:cf:cd:60:1e:bd:c0:a7:3d:fc:c1:55:36:0b:
1d:61:5a:e5:c8:48:cc:66:23:8d:f3:70:4c:6d:c9:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.217.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:bd:20:98:65:15:be:e2:bc:fb:ca:bb:79:3f:50:e5:d6:6e:
cb:ac:49:2c:0c:88:f3:6c:fa:4e:52:9f:0d:b3:65:db:ef:ea:
53:75:f4:68:41:c9:5a:f8:fc:b0:c7:93:d3:77:04:24:4a:31:
ba:e0:a3:5f:c0:1f:46:a6:c8:85:e0:71:42:04:93:a4:d1:db:
55:15:d9:1d:53:e1:93:21:2a:80:55:6c:dc:e1:be:d8:66:cd:
c8:86:26:0b:7a:ab:fe:05:65:7c:74:91:d2:fa:98:e7:95:64:
b9:ee:74:96:f0:7f:76:74:43:9b:0b:93:10:92:a7:f1:e7:94:
06:f0:4a:19:bb:9e:6f:d6:3f:e7:fe:8a:b5:90:66:05:09:ff:
70:cd:01:bf:43:98:78:d5:ba:c1:11:9e:7d:cf:5e:57:e4:b2:
90:e9:38:b8:42:41:d9:e3:aa:d3:35:89:0b:c0:a0:df:b7:25:
c0:7c:96:dc:e8:8e:ee:72:e7:87:cb:e6:52:06:24:5e:b1:08:
6c:d9:cb:f4:c1:3e:bb:73:c2:2e:69:ac:fd:09:85:2b:15:e8:
d8:ec:5c:a5:b5:e0:d9:83:69:dd:90:dc:03:70:07:01:65:4e:
17:55:3c:94:46:0b:4c:b2:9a:91:d2:90:4f:7f:d5:d7:a8:72:
14:d0:0a:02
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZQhQ5PiyYgRJAGX9N8jHAq8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTUyY2U0ZGQ4NjQwMjc2ZjRjMTg0MWFkYjNhNzQyZjU0NDkyNGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweQVwF9DM0t0KoJ+HBvKjtRXv0Oj
Qxe54r6eEu33tngTfocCUEQ7RRpRNQ0frwspqwmwqeXb5K8vgFj6PzWWq9yiuW1u
316TW++RVHOLPgpO6C51XCy8DwE5FsToiBTMtd25MkgQG9HbzeckEk1NL6kVHzNZ
Iy8kclgbyseCYNCZGcUn3E7O1N3x/uil+heT5N0c3tkslVho+WpahQVlFH6VrpGy
el+tEk85j64aGw6GQ9uvxUdKA2+TngxtM7p9QS7IZ0IPAvPCb+vZcBEzJjjZ7M2d
IVnr2m1bVYs9q8QQe8/NYB69wKc9/MFVNgsdYVrlyEjMZiON83BMbclTaQIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFAlSzk3YZAJ29MGEGts6dC9USSTqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkL2I1ZDll
MC1jNmI0LTQ2ZjYtYjQ1ZS1jNTZmMTc3NzA5ZGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvYjVkOWUw
LWM2YjQtNDZmNi1iNDVlLWM1NmYxNzc3MDlkZS8xL0NWTE9UZGhrQW5iMHdZUWEy
enAwTDFSSkpPby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAoNkwDQYJKoZIhvcNAQELBQADggEBAEO9IJhl
Fb7ivPvKu3k/UOXWbsusSSwMiPNs+k5Snw2zZdvv6lN19GhByVr4/LDHk9N3BCRK
Mbrgo1/AH0amyIXgcUIEk6TR21UV2R1T4ZMhKoBVbNzhvthmzciGJgt6q/4FZXx0
kdL6mOeVZLnudJbwf3Z0Q5sLkxCSp/HnlAbwShm7nm/WP+f+irWQZgUJ/3DNAb9D
mHjVusERnn3PXlfkspDpOLhCQdnjqtM1iQvAoN+3JcB8ltzoju5y54fL5lIGJF6x
CGzZy/TBPrtzwi5prP0JhSsV6NjsXKW14NmDad2Q3ANwBwFlThdVPJRGC0yympHS
kE9/1deochTQCgI=
-----END CERTIFICATE-----
Generated at Tue Apr 22 12:43:45 2025 by rpki-client