Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
File: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer (raw, json)
Hash identifier: bvsY4X59c74AWEisGEYy+ruSDBaPouUw3ThcCT4zZOo=
Subject key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194837626AC820D372DFC23B074B0241D80
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 20 Jan 2025 11:25:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 78.41.63.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:76:26:ac:82:0d:37:2d:fc:23:b0:74:b0:24:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 20 11:25:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f8:41:43:a5:7a:14:d0:73:bc:5d:78:ae:49:
93:d4:c1:41:0b:a1:bb:6b:99:b9:b5:e9:6e:23:5a:
07:23:fa:5f:e5:68:72:30:2a:14:ce:4d:47:75:5b:
24:06:44:7f:58:8b:6e:84:f1:5d:ba:c8:94:ab:c6:
ac:fb:62:8c:10:c3:d4:1d:4e:d8:06:ef:27:21:15:
b0:ab:5d:b6:42:17:ba:51:87:67:9a:79:0f:b6:4a:
23:a8:e9:ef:0a:65:36:e0:72:fe:87:98:3c:c1:84:
19:b4:0f:41:4c:64:d3:dd:90:44:ef:82:00:45:d1:
7f:f2:b2:b7:9a:9b:60:00:31:ce:8c:a2:0f:79:da:
89:e1:b7:9f:d2:79:9b:15:d2:43:14:e4:05:5a:fd:
08:62:b8:c4:1b:29:d0:e8:e1:86:17:16:e3:92:55:
1a:95:a7:54:0c:b0:e9:e1:6d:6c:d7:79:a1:c3:7a:
38:9c:dc:96:00:63:34:0c:e2:63:73:9a:ae:ce:e6:
8b:13:e2:be:17:3f:1c:f3:3d:a0:4d:71:f0:c8:08:
f0:ba:20:10:85:a0:f8:57:0a:b4:38:3c:53:07:81:
44:09:c7:22:1d:a5:73:45:ff:54:15:a8:64:fa:e2:
ea:dc:8e:c1:7d:c7:dd:bc:0a:0f:83:f3:5a:4d:c3:
61:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.63.0/24
Signature Algorithm: sha256WithRSAEncryption
14:7f:03:a2:2d:40:fd:c3:58:e4:90:b4:0f:73:dd:cc:03:3c:
55:51:94:2a:3d:63:79:24:95:96:5f:e8:e8:4c:2b:98:4d:59:
19:c6:cd:01:27:b3:21:a3:b9:8c:99:af:a3:68:63:a6:e8:06:
1b:51:06:a0:ad:48:71:a9:d8:fd:70:0b:1f:0e:14:fc:5e:f8:
50:93:da:e3:d0:d9:63:9c:48:a3:e6:01:4d:e3:dd:cb:19:99:
45:e8:ff:93:8b:fb:88:60:c9:8a:12:f6:5e:cd:b2:09:65:c4:
56:1d:dd:95:de:5a:51:29:56:dc:21:f1:51:f8:67:e2:45:23:
a7:02:20:7d:63:86:c4:50:07:e4:0e:8f:12:99:50:71:46:e7:
9a:e9:f4:3f:62:05:7b:1d:3d:d4:03:c3:2e:eb:e1:b4:12:f0:
45:2c:ce:ee:b4:a6:74:57:45:f7:9b:c4:56:c6:6c:36:c2:31:
5f:c9:71:e8:fc:fb:7b:19:2d:db:9c:6d:ac:13:c9:cb:90:40:
19:a8:87:b8:92:2a:97:98:ff:45:07:f5:18:ee:17:b9:0b:3a:
7c:4c:3a:74:39:e4:39:a7:58:40:cf:4f:0b:7e:a3:f5:0e:b3:
5a:f7:37:92:81:e7:0a:4e:41:e1:94:b8:95:31:98:ba:01:f6:
fa:13:07:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:50:23 2025 by rpki-client