Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
File: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer (raw, json)
Hash identifier: JJDdY/IuufkqdPofeYrcI49+zEkM5yJREZa0B9SkIB4=
Subject key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA58F9A1015FFE09641EF210918150
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.53.170.0 -- 193.53.199.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:58:f9:a1:01:5f:fe:09:64:1e:f2:10:91:81:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ab:03:18:61:76:62:bd:30:7d:ff:52:ac:e0:
48:85:1b:47:a6:fa:8a:ed:91:b1:9a:0f:44:60:00:
8d:98:56:5a:1e:62:0c:19:1a:68:b8:26:42:4d:1d:
16:c5:5d:00:a9:29:08:fb:94:ce:ca:a8:15:36:67:
78:5a:45:b9:a7:40:04:d6:98:41:e3:c2:9c:90:bd:
59:48:de:c2:98:b9:8d:ee:4b:f6:94:17:d9:97:77:
09:29:0c:80:29:2c:a8:8f:47:a0:5b:e1:50:cd:42:
6f:fd:c9:46:d0:31:b6:3e:e1:ba:96:9f:5d:23:c4:
21:7c:19:60:2a:dc:8e:ac:ba:dd:4d:10:85:1e:18:
6b:26:0a:05:7a:c5:7f:38:ff:78:d3:cd:88:54:67:
ca:16:81:2a:33:40:9c:a6:b0:6a:f2:e5:9e:03:bd:
29:12:99:82:14:ad:88:68:63:ba:7c:01:36:01:d7:
ef:cc:59:62:1e:5b:83:41:0d:ea:1e:97:74:33:45:
4b:e0:e2:6c:47:36:79:1d:f4:b0:ac:c0:e4:fa:53:
e7:16:d4:74:c8:6b:80:9d:e0:1b:10:e0:eb:b4:39:
f1:0f:aa:4b:26:45:9a:43:9f:89:51:9a:77:13:8e:
aa:7b:8a:1b:4b:c8:36:9c:2c:ea:d0:f5:6e:45:d4:
00:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.170.0-193.53.199.255
Signature Algorithm: sha256WithRSAEncryption
71:15:70:4c:a7:f0:84:2d:17:38:18:00:52:db:e0:21:9a:5f:
06:73:1f:0d:0a:e6:01:f2:0d:eb:68:93:7a:e1:c7:3b:7b:f0:
1c:3f:a2:8f:9e:d0:99:da:ed:5f:95:69:7e:3f:19:b8:b9:1a:
ed:21:f0:f4:bc:3c:de:c4:9e:a8:dd:55:76:30:ca:30:17:f7:
fc:62:d6:89:a3:8e:8e:c1:0d:36:1a:52:c2:ee:0f:6b:12:31:
85:1b:f2:ff:6f:56:39:71:24:25:fd:c0:8b:c9:b8:50:eb:5f:
3d:0a:dc:80:0a:94:0e:16:4c:1a:bc:96:b2:2b:49:2a:e8:df:
de:82:1d:37:6f:93:42:71:e2:46:69:ef:d3:eb:45:26:5b:9d:
8a:17:e0:a8:79:60:38:8d:ec:d0:4b:c1:bb:b3:5e:1e:40:f0:
7f:ce:fa:d5:21:b9:e5:41:00:4f:35:b9:5c:59:c0:36:55:53:
f7:b0:10:53:91:9e:91:53:74:8f:da:34:9f:e1:f9:51:60:82:
78:63:de:e1:9e:eb:79:77:a4:6b:3f:e2:2e:f4:ea:02:6c:4c:
59:55:8a:49:1f:ca:c9:30:3b:6d:90:75:69:58:97:6c:5b:66:
d5:3a:24:cc:42:6c:d1:ab:d6:fc:a1:87:c7:74:fd:e3:1e:4d:
d2:62:63:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:41:00 2025 by rpki-client