Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
File: 1-uJ7jB3msWHHmKt7hRU9a6N5774.cer (raw, json)
Hash identifier: s1XlXWD7lBBCmnlgaaQEhJlwTXdzyRsEtAMsQ0Rh1iI=
Subject key identifier: FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D75543B530077E85444F0A925E4579
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.111.34.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:55:43:b5:30:07:7e:85:44:4f:0a:92:5e:45:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:57:04:23:b6:49:4c:1b:a7:51:af:68:8f:
0c:02:1e:cd:38:87:a5:1c:b0:8f:04:07:7e:56:a8:
9e:b9:5c:e2:62:d8:4a:e6:c7:bd:80:50:3e:fb:53:
a2:65:13:fa:6e:ae:9a:c3:0c:b6:a4:d4:8a:23:1e:
62:5f:0d:24:a2:32:ae:12:6f:34:09:df:69:67:ba:
56:dd:aa:1b:10:0c:82:d0:0a:88:75:83:0c:94:73:
61:ef:5b:b3:b0:e9:85:27:87:74:d0:7c:66:99:19:
5d:03:d0:2b:7d:9a:fe:e7:e9:73:be:e4:53:01:d2:
2c:d8:0f:d1:03:3b:af:14:79:f4:d6:80:5f:2d:7c:
11:4f:7a:f1:09:7c:b2:45:b8:de:1c:ea:09:43:96:
ff:cc:c1:e5:18:c1:fb:e7:e7:15:0c:fd:8c:43:8e:
0b:f2:33:57:ba:1c:94:4c:ae:5d:27:95:52:0e:39:
93:72:67:8f:0c:75:a1:95:28:48:38:31:ff:3e:f0:
dc:e7:bb:89:5d:6e:7c:48:2a:a0:e3:3e:c0:44:3e:
d7:45:d6:7b:2b:75:59:5c:03:af:ee:c9:28:ed:2b:
fe:97:c0:ff:07:f7:4f:95:49:7f:f9:e9:af:e6:0e:
f0:a1:2f:f2:10:5c:32:44:b8:0f:b5:7f:67:b4:ca:
7e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.34.0/24
Signature Algorithm: sha256WithRSAEncryption
31:1a:5b:63:7e:d7:54:f4:59:9a:f4:ae:b9:9d:f7:dd:63:d9:
7f:16:76:64:f7:dd:ae:66:44:6b:ed:1a:de:09:94:e8:ed:2d:
cc:29:a0:ef:47:02:3d:c9:21:26:a1:4f:d6:96:a6:67:72:58:
fa:62:1f:59:0e:42:56:95:82:aa:2b:06:45:91:e4:93:65:1d:
18:92:3e:02:cd:85:81:f0:f6:d1:cc:2a:3e:58:69:22:fe:3f:
69:21:20:af:c7:45:e1:8f:55:46:6e:06:bb:11:15:50:9d:39:
6a:6b:8c:ce:b2:df:21:fe:48:f8:68:2a:26:17:80:8e:7a:cc:
c7:ca:b5:78:d9:55:27:25:7e:d0:d5:cf:b3:37:7f:cc:8b:23:
47:32:0d:70:fa:f5:61:95:96:cd:35:8c:e7:a4:86:e4:66:4a:
0c:0e:d1:0f:b4:87:f7:dc:95:bd:e5:a7:e8:19:9b:2c:5e:26:
a9:3e:b5:14:50:c0:ed:18:68:2f:bd:da:04:5e:5d:de:0d:e5:
ae:4f:ba:22:ad:60:25:a6:ab:b3:60:05:ff:8a:9d:80:27:3d:
32:ba:c3:50:00:15:85:33:ae:4e:80:59:85:1e:0f:87:c7:5a:
d2:82:95:7b:b8:08:cb:a7:f0:7d:d9:43:7d:84:70:92:7b:22:
7f:9c:1d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:15:25 2025 by rpki-client