Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
File: 8_su-07B6bb2xtC6JgdHqcPgrco.cer (raw, json)
Hash identifier: Zq88TPz4BnuPziK0F7lVk9MhcIriaT8qQH31Fv/KfdY=
Subject key identifier: F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258FBA15708DEB0B4ABBB27ACEE0B99C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:678:5dc::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ba:15:70:8d:eb:0b:4a:bb:b2:7a:ce:e0:b9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:03:89:77:8c:b6:4f:d7:04:7d:92:24:96:88:
b1:d1:9e:25:ce:04:37:0e:15:17:16:00:9e:63:a6:
5c:fe:cf:b5:4f:ae:3d:11:84:43:d1:1f:61:ba:d5:
75:00:14:14:c2:a1:3a:28:4b:72:0c:9a:dd:29:bb:
0d:52:d3:86:16:cf:8a:99:85:e8:d1:a4:d9:99:7a:
c2:f3:ae:a1:3d:a8:15:14:61:02:72:f4:39:d4:2f:
a1:91:6d:32:25:28:59:0b:d0:dd:13:18:93:40:bb:
75:5d:fd:86:93:a6:86:69:f8:cf:2e:42:be:d7:7a:
0e:1d:5d:da:c5:92:4f:13:67:aa:51:3b:87:bb:4f:
03:18:92:b5:fc:29:24:ab:a9:25:63:42:25:3b:fd:
90:98:4b:b2:17:60:2e:1a:6e:57:75:e4:39:67:5b:
cb:72:88:21:a4:cf:82:91:75:de:1e:75:67:7c:63:
50:a8:ec:57:36:b5:5d:33:dc:dd:ee:87:82:d3:1e:
97:1e:f8:c3:d4:cf:f5:78:14:cb:c5:f4:a9:b8:4d:
3b:21:62:1d:ca:45:0f:83:06:d7:c6:35:db:74:d0:
24:ba:da:85:68:a8:ea:e0:f2:c5:20:84:92:8b:a4:
18:4b:cb:4a:3a:b5:2c:aa:21:c3:e2:b7:42:37:bf:
ab:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:5dc::/48
Signature Algorithm: sha256WithRSAEncryption
32:21:d9:58:30:95:f4:d7:6a:3b:b5:92:94:02:d5:cf:4d:b8:
9b:52:7f:2b:17:7e:5b:77:ac:89:e4:3b:2a:7a:ed:b7:25:cb:
fa:76:18:a0:0d:ad:97:82:e4:87:77:c4:4a:76:e6:52:58:e7:
90:85:d3:c7:73:11:1d:91:db:32:56:59:d5:a8:01:dd:73:cd:
07:eb:65:2b:2f:d9:56:44:01:f2:33:2d:1c:51:75:5b:03:d6:
b3:5a:a3:b4:d9:57:c6:5e:de:cf:f9:8a:83:78:78:de:ea:4b:
28:24:f0:69:fe:9b:f7:69:6e:7a:f0:58:24:11:bf:e1:c5:eb:
93:c3:f0:5a:cf:59:38:1a:29:2e:df:dc:ab:ff:dc:77:44:79:
f2:7e:6a:bf:11:65:3f:cd:e2:b0:cd:4d:fd:ed:11:ed:93:8f:
75:d2:6b:9d:26:aa:5a:55:6f:b7:62:42:26:cc:67:c9:d9:fa:
94:98:2c:c7:c1:e1:af:c5:17:46:fc:2c:56:75:af:df:25:f5:
f7:fc:78:8b:ce:6f:32:8c:1a:3b:e7:6c:3a:34:74:91:da:22:
08:bf:e5:a6:d5:d6:c7:e7:1f:a0:bc:56:56:d0:aa:5b:65:f5:
0c:0d:0a:51:af:22:0e:89:67:d9:cb:a6:34:98:cd:3c:dd:d4:
5b:f3:95:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:52:43 2025 by rpki-client