Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
File: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer (raw, json)
Hash identifier: InnQHDoEPsuQjnKMkcsCtUC+jgjjWdDTeC/dpCcNAA4=
Subject key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214404E183255A2373CCEDE88096724F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 141.33.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:04:e1:83:25:5a:23:73:cc:ed:e8:80:96:72:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:0a:dc:7f:e0:81:88:37:79:e4:50:7c:b0:
72:a8:be:2f:da:97:e9:76:dd:14:b4:69:1d:12:50:
0b:56:86:b3:34:b2:15:6a:f4:c7:41:0a:e9:ee:68:
34:0c:f8:4a:c1:c9:71:d1:23:08:0c:30:fa:c8:92:
0e:d9:a0:8e:bf:0b:81:ff:e2:93:b8:87:b2:e9:04:
36:21:f8:d5:e6:03:28:b2:9e:8b:df:db:13:a6:ee:
26:3d:dc:38:36:6f:b5:a6:f3:20:f8:f4:49:06:bc:
5f:ed:0f:bf:c1:a7:50:ee:fa:60:00:e7:63:88:6e:
3b:c0:c7:c7:ab:3b:cb:46:97:c0:8c:58:ac:3b:b1:
11:48:f5:50:7e:b1:f0:9d:c0:ea:15:dc:86:9d:bb:
05:f9:d1:24:cd:1f:87:7c:ba:94:d5:64:e3:5b:7e:
b7:7f:e0:7d:a0:1e:79:9f:d0:ba:ad:21:e9:f1:2e:
b3:1f:83:8a:89:e7:c9:30:51:55:c1:f6:e2:19:38:
b1:7c:1a:6b:30:67:45:89:a4:97:93:e1:cc:2f:8e:
fc:0e:d1:af:10:03:35:bf:72:73:fb:e5:00:7d:97:
55:35:73:37:60:17:ae:52:1a:c6:ea:39:51:ba:81:
23:ea:29:0d:9d:8e:67:bc:8b:d5:3a:c1:69:ab:65:
e0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.33.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:fa:fc:e8:bf:b4:66:86:5c:9d:0f:7a:41:36:fc:33:43:a9:
a9:3e:b4:d4:cc:d7:84:07:0c:50:6c:ce:a7:2c:1b:5f:05:28:
1f:c0:fc:7a:9b:8d:9e:60:4e:fe:33:8f:5e:cf:d4:45:f2:1a:
bd:0d:fb:ac:cb:e7:30:3a:21:d3:ac:b7:56:29:84:f5:c4:8b:
87:38:a3:cf:1b:6b:4a:73:e9:4d:31:a5:53:55:39:fe:02:58:
c3:a3:31:f2:79:01:48:20:c8:40:fe:6d:97:ba:19:26:1f:d8:
d2:a1:5c:a0:7f:15:aa:55:87:c0:9c:6d:cf:0d:f3:35:1e:dc:
e3:f2:76:e2:e8:d1:5e:f5:7d:45:bb:38:de:00:00:45:4f:1d:
e6:7a:db:be:fe:40:41:89:fa:43:8d:ad:71:07:36:35:3e:3f:
9b:da:f0:43:78:be:c7:5c:b4:07:ff:74:42:bf:41:c9:d1:d7:
c3:5a:fb:ec:44:ae:e7:77:20:a6:ca:aa:8b:19:66:6c:10:c6:
2a:5a:d0:49:98:cd:39:a3:d8:8e:b6:62:39:f2:f0:be:fa:ab:
14:e1:8f:4e:da:c5:4f:27:dc:09:11:d1:10:b5:02:e2:81:d8:
11:ff:79:d4:47:56:c4:96:bd:fe:1c:00:cc:8e:17:8f:ed:4a:
98:e4:6f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:19:35 2025 by rpki-client