Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
File: 670ir7gN-togA9QOVG2v03_4af0.cer (raw, json)
Hash identifier: /7EP1eFIPSSnTGHyYdNsbJtrnCRScutczW10Wgf/gO0=
Subject key identifier: EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D81351D9B2313D11975E344365602
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.88.225.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:81:35:1d:9b:23:13:d1:19:75:e3:44:36:56:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:10:d4:3b:76:ad:74:b0:24:c0:07:4d:68:b4:
5f:5b:1a:af:a6:f7:1a:41:1d:c6:6c:a9:54:19:66:
b4:51:53:68:0d:e3:dc:1d:1c:78:f3:70:18:74:6b:
f7:5d:e4:f0:31:2e:31:3e:9d:12:69:76:fc:2e:ba:
aa:8d:bb:e6:ba:e1:3e:23:aa:c1:a2:97:c5:41:f1:
f8:82:21:76:ac:85:9d:5c:da:2d:37:d5:90:e8:f8:
77:bb:f3:10:46:d6:a0:94:81:2d:7e:22:24:31:40:
2e:2a:4e:1c:90:30:4c:51:4e:56:09:44:af:92:35:
86:98:ca:fa:24:ed:75:9a:65:14:2b:6a:41:dd:80:
00:3d:ba:89:c7:83:14:18:4d:ba:06:2a:03:3a:b8:
d4:b5:2a:f4:f4:81:3d:2a:de:06:e2:43:20:f1:51:
0a:6c:02:e1:fe:23:1f:eb:38:8f:3d:0d:23:63:67:
f4:6e:e7:8c:74:36:13:db:8d:c2:e2:2f:89:40:de:
c9:06:dd:cf:2e:8b:57:b0:41:83:ee:4a:e6:43:99:
cf:ee:bc:4f:3e:3d:46:d0:50:9f:42:98:e4:b3:fa:
f1:de:67:80:89:b9:82:4d:cf:6b:30:ac:9b:ec:64:
ea:58:bd:2f:91:3e:eb:be:20:0b:12:ae:b6:4b:b8:
2b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.225.0/24
Signature Algorithm: sha256WithRSAEncryption
09:e4:55:23:f4:4d:d1:42:54:42:79:46:b7:2e:67:66:45:38:
76:fc:ab:09:7c:d8:d0:82:4a:b4:2b:9e:fe:b4:a0:ba:8d:58:
48:0d:bd:d9:c5:df:f4:8f:ae:b0:6b:9f:29:97:8d:ae:4e:ea:
97:a7:3e:49:46:2f:3c:a9:40:59:36:19:aa:76:60:c7:e5:8c:
67:00:bd:53:31:a9:58:21:76:e4:03:b6:76:44:b6:00:a9:f5:
f8:0a:ad:f4:13:3e:71:b4:76:7c:5c:4d:5e:cc:0f:c2:6c:31:
ac:35:88:24:75:b7:f9:24:f2:60:cc:69:20:7e:9e:de:73:c7:
e3:d0:b5:67:7f:46:7b:95:34:46:f6:35:cd:51:01:a2:37:6c:
15:9b:98:9b:bf:c4:97:c5:e1:eb:7e:0c:4b:c8:a1:47:98:20:
27:98:cd:11:6b:82:70:f3:84:e3:e0:63:23:e4:46:ea:f3:af:
ac:60:07:ea:e0:e9:fe:74:c4:ad:59:9f:0b:2b:9d:b2:46:1e:
19:4c:77:03:5f:72:88:3c:31:a6:84:b1:ef:83:77:bd:2d:bc:
f5:c3:47:a4:46:06:9f:49:aa:36:5e:e5:69:69:63:8b:a6:b9:
35:68:52:14:0e:83:50:b7:74:9b:2d:4c:e0:88:ce:ab:64:85:
35:2a:98:da
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQijYE1HZsjE9EZdeNENlYCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmJkMjJhZmI4MGRmYWRhMjAwM2Q0MGU1NDZkYWZkMzdmZjg2OWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hDUO3atdLAkwAdNaLRfWxqvpvca
QR3GbKlUGWa0UVNoDePcHRx483AYdGv3XeTwMS4xPp0SaXb8LrqqjbvmuuE+I6rB
opfFQfH4giF2rIWdXNotN9WQ6Ph3u/MQRtaglIEtfiIkMUAuKk4ckDBMUU5WCUSv
kjWGmMr6JO11mmUUK2pB3YAAPbqJx4MUGE26BioDOrjUtSr09IE9Kt4G4kMg8VEK
bALh/iMf6ziPPQ0jY2f0bueMdDYT243C4i+JQN7JBt3PLotXsEGD7krmQ5nP7rxP
Pj1G0FCfQpjks/rx3meAibmCTc9rMKyb7GTqWL0vkT7rviALEq62S7grQwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOu9Iq+4DfraIAPUDlRtr9N/+Gn9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzdkMzU2
NS03YjAwLTRkODEtOWFiMy05MTllYWJhNjFiOTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvN2QzNTY1
LTdiMDAtNGQ4MS05YWIzLTkxOWVhYmE2MWI5NC8xLzY3MGlyN2dOLXRvZ0E5UU9W
RzJ2MDNfNGFmMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQALVjhMA0GCSqGSIb3DQEBCwUAA4IBAQAJ5FUj
9E3RQlRCeUa3LmdmRTh2/KsJfNjQgkq0K57+tKC6jVhIDb3Zxd/0j66wa58pl42u
TuqXpz5JRi88qUBZNhmqdmDH5YxnAL1TMalYIXbkA7Z2RLYAqfX4Cq30Ez5xtHZ8
XE1ezA/CbDGsNYgkdbf5JPJgzGkgfp7ec8fj0LVnf0Z7lTRG9jXNUQGiN2wVm5ib
v8SXxeHrfgxLyKFHmCAnmM0Ra4Jw84Tj4GMj5Ebq86+sYAfq4On+dMStWZ8LK52y
Rh4ZTHcDX3KIPDGmhLHvg3e9Lbz1w0ekRgafSao2XuVpaWOLprk1aFIUDoNQt3Sb
LUzgiM6rZIU1Kpja
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:15 2025 by rpki-client