Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
File: shna0BUe3wUqLxyX34hKWoeotfU.cer (raw, json)
Hash identifier: 96q+l1HMedC6OON1K9SQN96gUj8bQtGyW+iKjjY0kS8=
Subject key identifier: B2:19:DA:D0:15:1E:DF:05:2A:2F:1C:97:DF:88:4A:5A:87:A8:B5:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942823A13AA7126094893DCC515E9796D0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:50:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.222.212.0/22
IP: 195.242.128.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:a1:3a:a7:12:60:94:89:3d:cc:51:5e:97:96:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b219dad0151edf052a2f1c97df884a5a87a8b5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a1:6f:1a:68:3d:93:e1:e6:7c:80:65:cc:0d:
32:06:66:7b:ec:6c:48:15:61:c2:05:54:bb:13:48:
8d:4b:84:60:4a:10:09:81:8a:da:8b:3b:8c:94:80:
88:26:af:01:0c:18:90:1d:f1:53:c9:a2:8d:f5:0a:
42:9c:27:f5:15:a5:33:d2:d8:51:7d:0f:b0:94:cb:
de:da:41:a5:0e:98:1b:c4:13:93:9b:94:29:6e:77:
8d:92:46:05:c9:45:82:cd:4d:c0:24:97:c7:bf:2f:
ac:3d:5b:a1:3c:36:a0:95:d7:50:b2:be:a8:90:12:
82:71:1d:07:92:04:73:31:d3:12:63:21:ca:29:e9:
f2:d1:fe:6c:65:95:79:85:5c:a2:b7:1d:51:4a:12:
9e:5e:cd:5c:d2:78:e3:5a:81:5e:8e:25:91:84:6b:
cc:cd:82:6f:52:72:12:0f:ff:6e:10:b9:56:82:e0:
e7:b9:da:21:ec:f4:21:22:6e:08:b4:eb:52:a9:5b:
bc:77:6c:f5:5f:13:a1:5e:27:3f:99:cb:bb:28:f0:
0c:44:dc:f4:5a:e7:77:5c:4e:8c:0f:1b:78:88:26:
61:e9:45:8d:e6:95:bc:44:53:a0:21:67:da:8e:23:
2e:04:49:c5:49:6f:4d:55:c9:95:8c:a8:30:b2:da:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:19:DA:D0:15:1E:DF:05:2A:2F:1C:97:DF:88:4A:5A:87:A8:B5:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.212.0/22
195.242.128.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:3f:a5:87:64:fc:83:6e:99:ad:cc:6e:9d:9c:72:b6:aa:02:
ec:4f:b3:d5:f0:35:2f:e9:98:98:43:0e:c8:b2:f1:ff:7e:fc:
80:7c:0b:13:51:d5:d1:92:f5:44:40:90:62:9f:91:05:6b:7a:
23:1c:88:c2:2a:49:66:04:2e:07:f2:b3:29:c3:11:c4:86:d2:
4d:79:48:6e:2e:dd:18:cd:7d:5a:e0:12:f0:9c:a9:90:5e:50:
20:b6:9e:99:e4:94:38:b9:ac:91:8a:f6:cc:70:32:a4:a1:43:
57:0a:9e:c2:45:4a:61:57:7e:e6:a2:ca:66:3e:2a:c6:52:a0:
cd:6e:43:35:86:52:2c:f2:22:d9:93:cc:7d:87:57:57:ef:c7:
bb:28:b9:6a:29:c5:2f:94:20:de:31:25:87:3f:e8:42:37:80:
0f:80:84:a2:88:b5:ff:ed:82:08:b8:46:e6:e9:07:21:06:9d:
96:88:e7:a2:78:2c:29:82:80:f0:52:0e:94:c0:bd:4a:d2:96:
e0:d5:2b:92:4a:14:ae:09:ac:d0:3b:56:89:7a:8e:e3:30:fc:
24:fb:33:47:f9:3f:9f:93:b2:ed:c7:df:ee:a3:b5:8a:0b:b5:
09:b7:d4:a3:a5:f8:ef:7e:9c:17:69:02:ee:a9:de:58:d1:fa:
8a:2c:0f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:37:35 2025 by rpki-client