Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
File: 2q4t5U2ijHPxmz4E75V06ZBX8aI.cer (raw, json)
Hash identifier: piiPRGak5lKrEddMykWl0IrevWwF5Twk52NAju/Y7zQ=
Subject key identifier: DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D70BDA28330A559E2823E2F292E32A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 141.18.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0b:da:28:33:0a:55:9e:28:23:e2:f2:92:e3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:29:34:8e:7b:6a:9c:91:d7:ba:4d:ca:01:
18:2d:5c:1b:40:7f:40:ec:3a:f7:e9:76:28:cf:45:
b7:cf:3d:28:7f:d1:d7:da:20:b2:b1:f1:94:e9:3f:
91:c9:20:de:2c:e5:23:4d:1c:de:7e:2f:2e:2c:5a:
09:cf:17:ee:61:1f:68:75:a1:85:e2:17:b8:0b:b8:
c7:50:c2:ed:9c:62:9d:9f:f6:65:d4:8b:9a:99:2c:
06:e2:48:45:cb:10:d0:fe:54:5e:91:d4:a9:60:56:
c2:18:44:b9:8a:cb:88:7d:17:b4:c6:c8:a0:22:35:
c3:b3:a1:02:f4:1e:33:87:c1:3f:83:a8:a5:2f:be:
a4:e5:48:5b:ce:b3:f5:18:b3:71:5e:0c:78:10:e4:
ff:0d:b1:31:a1:27:de:45:8a:d8:0b:b1:d4:50:ee:
c0:43:29:0f:92:43:bb:e6:db:a9:c5:5a:68:73:40:
a6:ae:68:91:1b:99:45:57:90:7f:75:76:ae:c4:7f:
ae:57:75:b7:6a:7e:d7:92:74:af:7a:96:3b:80:c5:
68:4f:f6:c2:98:ad:8d:8e:b6:be:eb:a6:52:09:1f:
f7:66:22:1f:db:f3:c0:1c:52:a9:d7:01:9f:95:63:
e9:3f:de:73:49:18:e8:90:9e:72:f9:0e:b0:9f:66:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.18.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:35:79:af:ca:09:07:c2:fe:0e:cd:da:2d:22:04:ee:75:f5:
aa:81:f4:c3:da:2c:ac:d8:8e:4b:7d:fa:3b:99:da:23:2a:8c:
cb:65:84:da:e9:ea:f9:f8:3c:4d:4b:74:7b:33:22:c4:17:e8:
9d:f6:2c:5d:6c:ac:ce:1f:b1:cf:47:5c:7b:98:d0:b0:6d:fb:
19:65:90:d4:9e:dc:ac:84:e2:3b:41:9f:88:f0:3b:be:83:82:
32:3f:2f:36:e3:cc:9e:9f:b0:d2:d9:ea:ae:b9:d0:d1:8a:d1:
36:0d:e6:1c:02:95:b6:08:3e:aa:97:e3:69:f4:c3:1c:17:2b:
5c:08:ee:ba:aa:6b:39:9e:20:0e:f7:70:51:12:c7:f7:e7:51:
3d:ea:9e:81:02:10:11:91:ae:66:ce:ea:59:16:3c:98:23:7c:
35:c0:77:69:10:2a:d0:51:cd:1b:dc:59:ef:3a:a0:1a:3a:7c:
b8:d9:90:17:a7:da:ac:9c:f9:1e:b7:bb:93:49:24:87:0e:44:
b0:2e:6b:fc:2e:84:c4:f7:f7:41:a4:bf:e7:c5:5a:c3:54:88:
c9:8d:1a:03:d4:8a:33:ab:77:92:8a:4c:22:21:82:e5:1b:25:
d8:45:c6:fd:40:b3:f1:ba:b2:b1:16:e3:b4:97:89:77:cf:1f:
0e:46:88:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:19 2025 by rpki-client