Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
File: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer (raw, json)
Hash identifier: qbSRPrXHfj/Crg0AePRrvQ/2VRsjPriTFq5SUZUJYaE=
Subject key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F5C5701688236816D82D18DC466CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.208.220.0/22
IP: 2a09:8ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5c:57:01:68:82:36:81:6d:82:d1:8d:c4:66:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d2:f6:9a:12:a9:09:3f:0f:1a:26:a3:ca:df:
5b:8a:3f:65:5e:25:5b:b6:b6:76:95:b7:3d:00:24:
f0:37:c8:09:19:a2:9a:17:53:57:d6:1d:74:7e:d8:
c4:96:a5:4e:17:0c:bc:54:35:dd:89:b7:7d:75:f4:
68:de:0a:ac:cc:9f:7a:82:af:5e:95:0c:0a:ed:fb:
07:91:af:89:18:11:a1:3d:c5:6a:fb:db:cd:1c:1c:
3d:37:d5:0f:2d:80:b1:a2:10:0e:10:0e:49:89:16:
31:1d:80:1a:d5:ef:b6:4a:b8:a2:7e:41:15:1b:c6:
8d:04:c0:cd:7e:e8:19:7b:ef:d1:ad:13:5f:03:b7:
8d:ff:b8:cf:75:09:79:af:f7:44:c2:72:fd:d3:fc:
94:00:79:b3:0d:1a:7a:91:fc:9b:e0:37:fb:40:05:
9f:53:ea:cd:7b:22:c1:dd:32:11:3f:c9:7e:36:ff:
be:1e:df:90:12:96:c4:0b:57:eb:51:9a:1c:5e:d8:
b9:f5:fc:95:c5:f4:d7:74:ed:7e:eb:d6:e2:78:81:
9c:f0:91:f2:84:9d:df:fe:b3:f7:6e:e2:c3:02:0e:
47:85:a6:77:ee:69:2a:cc:96:be:d0:12:c8:1d:3d:
b4:ae:c0:1b:e2:5a:9e:a4:82:10:22:9a:5f:a1:5e:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.220.0/22
IPv6:
2a09:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
2e:96:65:81:8b:08:52:26:1d:11:9e:26:aa:9f:31:79:53:e9:
57:96:6d:7e:3d:57:c3:f7:5d:a5:1b:31:b1:e0:70:28:5f:c5:
de:1f:90:4c:49:d4:5b:fe:e0:cc:e0:a3:87:4a:7c:d6:08:ed:
ae:a1:7c:ff:7a:6b:c2:9d:6a:a7:07:38:e9:12:50:f8:b5:14:
1f:82:1e:95:4f:96:43:3f:6b:d0:da:44:78:13:66:ed:44:d2:
07:9c:b9:e2:0c:a8:d3:e8:0d:bc:6d:ad:28:3a:99:a7:e1:41:
09:64:7f:92:75:17:b1:19:a6:d6:53:af:b6:b5:59:84:0f:3a:
a5:c0:e8:ab:94:ad:5b:fc:28:10:4f:77:44:76:62:50:7f:58:
aa:fc:ed:b8:21:17:c4:aa:10:30:a2:b3:88:1d:ea:3c:ea:9e:
e9:86:83:05:c4:36:93:11:69:da:d0:3e:80:1d:2c:61:e6:97:
d4:7d:ea:fc:27:9b:7a:1d:87:14:e0:7f:b0:be:de:7b:1d:b5:
7b:f7:83:6f:af:c2:90:ee:f2:dc:32:21:b9:53:75:fb:78:9b:
32:fb:65:68:21:89:f1:82:af:20:7d:ec:bd:2c:d9:58:ae:d6:
c1:3b:27:a7:bf:44:8e:c5:53:ed:d4:7e:d9:be:e3:f5:ce:48:
71:e1:4b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:44:20 2025 by rpki-client