Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
File: 2-arjgxG6EG0TSucawO7ZfViHbE.cer (raw, json)
Hash identifier: NBLEdvfFIvnZTKeZAEXM7gKmRt+TnlP28ly7FpZQq24=
Subject key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B391C028DC84882863EC7DC6CD1A80
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.142.146.0/23
IP: 2a0f:ca80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:91:c0:28:dc:84:88:28:63:ec:7d:c6:cd:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:03:c8:29:a0:88:c2:b3:5c:d6:ac:ab:1e:3a:
2b:3d:6f:f2:f9:3a:05:0e:1b:4f:0a:e1:ea:da:96:
bd:26:1f:a7:dc:61:ce:0a:82:13:ef:59:cc:a4:45:
b0:11:6c:5e:bb:97:be:01:f9:79:a5:9e:9a:16:52:
77:b9:34:7e:d3:7e:10:4a:53:18:5a:40:eb:9e:92:
1b:c6:30:f5:7d:01:5e:cb:5a:eb:6d:1a:7e:66:e8:
43:7d:d4:b5:45:b4:0f:03:76:4b:49:99:fd:be:cd:
e1:41:9e:14:44:3d:12:27:f1:e0:ed:da:fe:65:81:
d7:0d:a7:f1:d0:fe:4f:2f:1f:c6:52:42:84:bb:53:
58:c1:6f:2f:7b:3e:67:d3:ff:08:b4:c1:bd:1b:c6:
e0:7f:e3:45:6f:6f:13:8e:e3:dd:06:d6:1f:a0:df:
66:03:af:e2:dc:42:15:d6:79:aa:b0:05:49:bd:a6:
70:8a:19:4c:48:5f:1d:3f:87:7a:d1:46:4d:74:bb:
bf:ad:c2:5b:36:f1:09:55:bb:ed:b0:fc:92:fe:08:
13:07:bd:3e:97:d6:e7:f8:d9:c0:71:94:ce:ee:25:
46:3d:5d:0b:b6:5e:42:19:b0:0b:4c:08:48:f0:2c:
e2:f6:b2:80:b3:57:46:55:a6:34:55:cd:84:54:4e:
ea:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.146.0/23
IPv6:
2a0f:ca80::/29
Signature Algorithm: sha256WithRSAEncryption
99:14:70:26:64:53:77:c3:65:35:b8:af:30:27:1e:20:ae:f2:
3e:7b:3a:b4:9b:d9:d2:e2:96:95:50:15:c2:12:f0:96:c5:63:
ba:87:00:b2:dc:f6:0e:af:94:43:90:6d:0a:2d:0a:6a:25:16:
da:ec:bb:fa:37:54:13:89:94:03:47:64:b3:af:29:b1:d3:9f:
3e:51:2f:33:36:78:1e:00:9f:4c:23:fe:23:66:1a:3e:00:95:
a4:e2:8d:2a:c6:da:3f:e4:bd:e6:8a:c8:5e:d9:ed:b0:43:3b:
37:5b:75:1c:4c:51:64:1a:f2:a9:ce:c4:1a:d7:78:13:3e:67:
fe:86:e2:06:f1:52:62:cf:53:14:0a:94:32:7c:30:df:fc:a1:
96:68:4d:60:ff:74:e1:0c:b1:e8:1c:03:3d:0b:16:67:34:71:
41:81:44:b3:f6:82:a5:fb:1c:14:5e:fb:89:5c:3c:72:0e:60:
c4:71:af:c9:c5:2a:39:8c:23:de:20:42:e2:f2:5f:5e:db:59:
40:dc:21:95:9d:5b:3d:8f:c4:dd:a5:7c:b2:53:83:21:06:5e:
c7:94:40:1a:40:e5:ee:8d:3a:8d:e8:70:93:14:2f:a2:a0:63:
36:3c:06:e2:c8:e5:95:ce:a9:30:40:3e:e4:5d:17:32:41:b1:
f4:00:8b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:55 2025 by rpki-client