Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
File: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer (raw, json)
Hash identifier: j9/Vd3bnKqO136nxy+ft5fW1cg0g5bXexeQjDvyspvg=
Subject key identifier: D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01947199A83F277800152966C02DAAF320BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 17 Jan 2025 00:11:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 46.235.15.0/24
IP: 103.54.88.0/22
IP: 103.126.48.0/23
IP: 103.209.228.0/23
IP: 2a00:9940::/29
IP: 2a04:e880::/29
IP: 2a06:4b80::/29
IP: 2a06:8540::/29
IP: 2a06:9dc0::/29
IP: 2a07:35c0::/29
IP: 2a09:2340::/29
IP: 2a0a:6cc0::/29
IP: 2a0a:cfc0::/29
IP: 2a0c:52c0::/29
IP: 2a0d:8180::/29
IP: 2a0d:c500::/29
IP: 2a0d:fd80::/29
IP: 2a0e:3dc0::/29
IP: 2a0e:7fc0::/29
IP: 2a0f:f9c0::/29
IP: 2a10:c80::/29
IP: 2a10:5480::/29
IP: 2a10:7b80::/29
IP: 2a11:3f40::/29
IP: 2a14:2b80::/29
IP: 2a14:5c80::/29
IP: 2a14:6580::/29
IP: 2a14:7080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:71:99:a8:3f:27:78:00:15:29:66:c0:2d:aa:f3:20:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 17 00:11:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4074714142f83970148fab0ec3e2117c393c491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:3b:ab:4b:9a:ff:7d:1d:52:82:da:7c:b7:
b6:25:51:65:00:f5:f3:2d:f6:02:03:9b:a4:1e:65:
f2:25:91:5f:32:74:78:b2:6f:9e:dd:ed:57:4e:e5:
79:13:2b:30:15:7a:2b:bc:dc:73:55:97:d4:07:81:
89:09:04:dc:a7:21:7b:fa:2b:fd:95:95:39:69:6e:
6c:43:1e:6a:d8:09:f0:14:ac:6c:a2:a3:4e:06:f0:
71:c5:c9:6f:64:86:2a:df:2c:81:16:2a:65:f8:7c:
ca:71:1c:52:44:12:14:e9:a7:5a:99:a0:b2:d0:ff:
33:cd:86:ce:a3:f9:a7:e4:a6:a5:f7:0d:f6:e7:b6:
5f:25:96:82:44:32:6f:84:f8:73:2d:8d:4c:67:7e:
93:3d:55:79:e3:84:3b:29:73:d1:9b:26:a4:99:f3:
57:aa:87:ca:f4:ab:48:bd:29:20:1e:ab:45:2a:fe:
ca:f1:f7:9a:17:ae:28:81:53:0b:28:44:02:27:44:
26:96:b5:0e:53:ac:99:ae:49:2c:ae:ea:70:4b:4c:
e2:8a:1d:3a:6c:aa:62:6a:48:c5:30:22:43:7c:1c:
d1:84:ce:ca:aa:ff:5a:3d:33:84:88:f5:12:be:f8:
7e:f9:94:81:45:fc:2d:74:d5:9c:a0:8a:dc:ea:82:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.15.0/24
103.54.88.0/22
103.126.48.0/23
103.209.228.0/23
IPv6:
2a00:9940::/29
2a04:e880::/29
2a06:4b80::/29
2a06:8540::/29
2a06:9dc0::/29
2a07:35c0::/29
2a09:2340::/29
2a0a:6cc0::/29
2a0a:cfc0::/29
2a0c:52c0::/29
2a0d:8180::/29
2a0d:c500::/29
2a0d:fd80::/29
2a0e:3dc0::/29
2a0e:7fc0::/29
2a0f:f9c0::/29
2a10:c80::/29
2a10:5480::/29
2a10:7b80::/29
2a11:3f40::/29
2a14:2b80::/29
2a14:5c80::/29
2a14:6580::/29
2a14:7080::/29
Signature Algorithm: sha256WithRSAEncryption
41:95:36:6c:e8:17:ed:48:ba:23:60:ad:e7:94:58:2a:bd:92:
0e:50:62:95:24:41:45:e8:e2:fa:54:f1:71:4a:24:ce:4c:3e:
f5:70:fa:14:03:db:cb:dc:0f:47:12:9e:19:12:b7:87:65:65:
50:97:83:85:3b:26:00:2a:88:81:58:f6:91:0b:6a:ab:ac:f3:
eb:0f:c8:b2:f7:71:2e:05:d3:eb:7e:e7:ac:f4:db:f7:e9:27:
9a:23:11:ba:a0:e7:53:ae:45:d8:71:75:06:fc:32:39:57:cb:
2a:91:78:ac:c2:ba:14:a3:2d:1b:55:60:94:b6:d4:0b:1f:16:
1e:77:08:2e:2e:3d:3b:e2:0a:21:a9:ea:a9:c9:5e:77:f4:fe:
86:0e:d2:7f:de:6a:ed:31:4f:7f:d3:b0:36:a0:38:de:98:83:
b2:42:c4:a0:a9:bc:f1:73:57:52:eb:fe:7f:10:b6:6b:39:21:
dd:24:11:98:43:bb:cb:92:65:01:11:3e:d6:3e:42:eb:39:38:
39:bd:cd:bb:03:40:1e:99:e6:05:d4:b9:11:63:ad:33:55:1c:
e3:87:af:7b:9b:64:13:27:48:3c:d4:38:af:ba:9c:cc:d7:d6:
00:4d:de:ee:d1:83:0a:3b:b1:79:4b:bc:ea:09:71:b8:a5:2b:
d3:ea:3a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:49:26 2025 by rpki-client