Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
File: VmHZZN9KhtuP-5mqiVgtpoowkIw.cer (raw, json)
Hash identifier: jInCjOnboYIYJVlquo7FJoQzNtxVUoosQTm0iuxtbH4=
Subject key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01953C871AE926F942D771326C90EFD61829
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 25 Feb 2025 09:54:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.134.99.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:87:1a:e9:26:f9:42:d7:71:32:6c:90:ef:d6:18:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 25 09:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5661d964df4a86db8ffb99aa89582da68a30908c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:83:75:b9:8e:bb:83:6b:32:e2:33:e8:20:
a6:d5:0c:68:d3:a1:ec:d2:6a:12:d4:f8:95:eb:a9:
a7:0c:a3:c5:9f:d1:ae:77:fb:b8:1c:1a:e1:4e:a6:
be:df:5c:2c:d1:1b:0a:23:ed:62:81:b1:c2:d1:f1:
a0:dd:b3:c9:6f:15:5b:7f:8e:d1:6a:40:32:16:9d:
f0:6c:f9:54:7b:ce:8b:78:e0:e9:86:e4:84:8b:83:
4b:36:07:04:23:53:39:78:86:6a:2b:86:64:7b:db:
4c:26:40:49:a9:34:0b:82:51:5b:03:b0:3b:a8:9a:
b1:27:d6:c2:70:a6:79:7f:9d:76:10:bd:3b:64:f7:
72:90:7c:cf:7f:6f:d0:80:f5:6e:a5:a8:f7:29:b0:
e4:3d:99:99:96:37:a5:55:a9:a8:b3:a3:59:31:ca:
45:27:12:5f:99:33:2b:b2:04:b6:ad:10:14:1b:06:
fa:d1:0e:b5:7f:66:ba:f6:4a:44:25:d4:b3:07:4b:
79:1d:4c:30:39:32:fe:e2:ba:27:3a:c7:92:0c:68:
b9:b8:27:b6:81:b9:e7:e3:be:0d:3f:e6:50:cf:cc:
af:2e:9f:8a:dd:e4:b6:24:62:40:0d:74:92:94:b0:
a1:5d:78:e1:1d:9d:9b:cb:4a:86:b3:fd:9f:07:1f:
36:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.99.0/24
Signature Algorithm: sha256WithRSAEncryption
52:cd:32:ec:5b:83:c4:f4:26:b8:ec:3b:2f:21:e4:a4:d4:53:
c6:91:7c:a6:2a:a8:39:f6:a2:1a:f0:74:c2:59:ec:ed:76:fc:
73:38:c6:ee:84:8e:58:9f:6e:0e:3c:43:c3:82:2a:22:2a:f4:
a2:6e:18:22:8f:2c:1f:be:93:37:ac:ef:5f:a5:6f:28:64:b4:
57:41:4b:7c:da:35:6c:3f:07:33:ec:52:12:6c:39:e5:dc:cb:
96:d9:87:38:3f:08:c3:5f:76:80:ae:7f:4c:65:04:ca:00:79:
8a:48:7f:fb:1d:37:ea:ea:f6:f5:07:3a:df:4a:45:32:a7:31:
a7:f7:b0:55:ef:e1:9d:27:4f:3f:3c:d2:43:c0:1e:71:38:62:
e0:0e:aa:7d:2e:1f:59:62:9e:b8:46:2e:be:ee:83:42:eb:9b:
54:df:67:4e:4a:e4:db:a9:f8:4e:a0:1b:59:3a:0a:f2:db:d0:
8d:ad:66:e0:a4:48:bb:92:aa:b7:af:ef:eb:8b:ef:a4:4f:4a:
df:80:bb:ef:ad:29:19:54:2a:5b:49:e2:78:01:1c:f7:a9:d0:
1e:bf:6f:be:11:d3:84:bf:e6:06:8c:f6:b6:e0:82:98:47:03:
ca:41:a7:bd:32:3d:2b:31:2c:02:0f:a9:e3:84:2e:61:6c:f1:
cb:03:04:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:10:47 2025 by rpki-client