Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
File: 1a8gwCbeEE2W8XrLr054fvnTAgY.cer (raw, json)
Hash identifier: QB5mp8tcXC1a4Fe/yWMQRzA2lIbwf0G1+8DmQeav6uU=
Subject key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942823110EF21F6F10D487F8FD2F942728
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:49:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.154.160.0/22
IP: 2a07:8e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:11:0e:f2:1f:6f:10:d4:87:f8:fd:2f:94:27:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9c:ba:1d:db:9c:6c:96:39:a9:a2:e7:ac:bd:
cd:2a:9b:30:ad:a1:3b:0e:c4:3a:60:76:58:c1:63:
59:5b:2e:f3:20:d7:6f:a5:28:26:a5:66:54:f8:be:
3e:05:83:c5:e8:4d:bb:97:75:32:9c:0a:83:dc:7c:
27:ab:63:c8:e5:c6:e3:a5:f2:b2:08:e1:bb:2e:40:
c0:0f:da:ae:62:12:93:d3:79:0a:28:90:3e:b7:5f:
15:39:a1:74:e3:c0:ac:91:71:8c:91:e5:2d:8d:fd:
94:33:27:8c:0d:6f:fa:12:a1:1f:ea:08:49:f9:8e:
ca:28:d9:b7:d0:83:e9:ef:be:b2:03:fd:f1:87:db:
e3:a0:de:05:3f:38:70:ba:de:88:83:d5:20:15:18:
56:ad:60:22:1d:14:c6:ca:c5:cd:d8:16:40:18:e9:
0b:15:e2:7d:62:bc:7b:de:f4:13:0c:f7:97:ba:0f:
19:35:63:d0:30:cf:81:7e:40:7c:5b:6b:04:5a:e5:
90:c4:52:95:28:48:b9:0c:2d:bb:37:79:ec:85:4d:
9f:aa:82:f5:11:92:87:8d:a1:71:14:c3:2d:2a:43:
a1:f7:32:46:de:57:bf:ef:9d:90:6b:d6:3f:f3:ed:
ee:a7:74:ae:6e:3c:34:c2:d2:c1:e2:85:6f:ba:b9:
49:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.160.0/22
IPv6:
2a07:8e40::/29
Signature Algorithm: sha256WithRSAEncryption
5f:a0:b4:60:9e:9c:e5:71:1d:d2:05:8b:d6:d6:b0:f6:a8:a2:
76:00:d9:b2:e4:53:cc:d3:1c:2d:8c:91:4b:be:ac:08:f1:9d:
67:89:0e:78:9a:97:a2:eb:dc:c7:65:7b:8f:df:9e:02:4e:9e:
e9:f6:19:d9:fa:85:b3:92:03:b0:31:3d:b5:35:c3:17:8c:9d:
f1:6a:b2:6b:ef:26:f5:59:41:d6:38:6c:bf:f0:59:db:f9:8a:
34:7f:ae:84:17:1c:81:6d:75:18:7a:8a:7d:05:31:c1:f7:fa:
f6:c9:f9:fa:8f:52:4a:f9:c0:51:12:0a:b9:5b:95:33:32:56:
d6:dd:66:0f:ed:21:61:0d:cb:74:df:ee:74:6e:d0:6a:d2:2c:
80:59:e1:9d:66:96:54:51:e8:ef:af:0b:aa:83:88:f0:99:eb:
65:e4:10:c9:8f:00:90:f1:de:22:a6:84:f9:11:ac:1b:d1:b2:
5b:21:e5:c3:72:8c:0e:bf:cd:bd:cf:62:da:9d:68:33:96:35:
d4:bf:93:77:d2:60:bf:34:c2:4a:f7:bc:00:09:17:fb:f7:da:
16:cd:ff:8e:eb:5f:55:9e:89:d7:55:47:11:29:c4:cc:2c:85:
d9:ae:e2:89:a2:ac:23:dd:bd:90:eb:4f:ea:5b:b9:d1:ba:02:
80:e9:fa:cf
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQoIxEO8h9vENSH+P0vlCcoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTc0OTM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWFmMjBjMDI2ZGUxMDRkOTZmMTdhY2JhZjRlNzg3ZWY5ZDMwMjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6py6HducbJY5qaLnrL3NKpswraE7
DsQ6YHZYwWNZWy7zINdvpSgmpWZU+L4+BYPF6E27l3UynAqD3Hwnq2PI5cbjpfKy
COG7LkDAD9quYhKT03kKKJA+t18VOaF048CskXGMkeUtjf2UMyeMDW/6EqEf6ghJ
+Y7KKNm30IPp776yA/3xh9vjoN4FPzhwut6Ig9UgFRhWrWAiHRTGysXN2BZAGOkL
FeJ9Yrx73vQTDPeXug8ZNWPQMM+BfkB8W2sEWuWQxFKVKEi5DC27N3nshU2fqoL1
EZKHjaFxFMMtKkOh9zJG3le/752Qa9Y/8+3up3Subjw0wtLB4oVvurlJGQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFNWvIMAm3hBNlvF6y69OeH750wIGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JiLzA5ZDcy
ZS04MjY3LTQzOTMtODM2My04OWYxODE1ZDRjMTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvMDlkNzJl
LTgyNjctNDM5My04MzYzLTg5ZjE4MTVkNGMxOS8xLzFhOGd3Q2JlRUUyVzhYckxy
MDU0ZnZuVEFnWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuZqgMA0EAgACMAcDBQMqB45AMA0GCSqGSIb3
DQEBCwUAA4IBAQBfoLRgnpzlcR3SBYvW1rD2qKJ2ANmy5FPM0xwtjJFLvqwI8Z1n
iQ54mpei69zHZXuP354CTp7p9hnZ+oWzkgOwMT21NcMXjJ3xarJr7yb1WUHWOGy/
8Fnb+Yo0f66EFxyBbXUYeop9BTHB9/r2yfn6j1JK+cBREgq5W5UzMlbW3WYP7SFh
Dct03+50btBq0iyAWeGdZpZUUejvrwuqg4jwmetl5BDJjwCQ8d4ipoT5Eawb0bJb
IeXDcowOv829z2LanWgzljXUv5N30mC/NMJK97wACRf799oWzf+O619VnonXVUcR
KcTMLIXZruKJoqwj3b2Q60/qW7nRugKA6frP
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:06 2025 by rpki-client