Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
File: A-pQioW8c6mqogOop7r5wWLm82w.cer (raw, json)
Hash identifier: H9PV3f3/NGy561DdjjTG7gC/7B9BtjQYtB2tFqNvUUA=
Subject key identifier: 03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BF18D710EE03E64E2A81C77D12F5C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.55.100.0/22
IP: 2a01:8e20::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f1:8d:71:0e:e0:3e:64:e2:a8:1c:77:d1:2f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ab:0b:5c:d4:8d:95:b8:40:da:4e:67:a8:70:
65:e6:64:15:62:bd:e6:f4:49:74:a8:b2:ac:d4:71:
90:c7:04:5a:7b:df:e1:4d:07:64:61:6f:e9:c7:6b:
cf:15:69:ff:45:53:34:e5:00:07:a7:d1:c8:f2:ba:
37:16:be:a0:d1:7f:c3:d7:ff:57:c9:a1:b4:be:49:
94:71:fc:db:c6:e2:4e:44:b9:e1:0a:b7:cf:4c:24:
e2:66:1f:bf:21:8b:cb:49:4c:8a:61:63:8b:1c:81:
36:ca:ce:56:fd:93:d2:fe:8d:46:cc:34:8b:c9:80:
ed:bf:3d:06:de:69:37:33:4c:99:15:c6:16:36:bb:
95:45:40:05:c1:cb:87:46:7e:29:88:23:eb:ca:22:
ad:cd:9a:f3:a3:9b:cc:2a:8b:ee:f7:63:07:58:15:
c2:38:16:d1:13:00:53:88:dc:54:07:5b:1f:28:73:
6a:19:e4:d2:c6:ed:f6:71:07:49:56:8a:4e:e5:2d:
e6:fc:53:16:d8:6f:62:ca:4d:24:51:68:3f:4a:d1:
52:5d:ee:9b:69:75:55:1c:29:30:ee:e5:8d:2e:10:
6a:ac:cf:96:bc:f6:05:7f:7b:6a:b6:b0:db:c9:d0:
ec:c4:d4:4f:e3:fb:67:10:cd:cc:d1:c8:07:a9:fa:
39:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.100.0/22
IPv6:
2a01:8e20::/32
Signature Algorithm: sha256WithRSAEncryption
83:99:1e:c4:ac:b4:0a:6d:d7:ce:26:c5:41:cc:fd:1c:a0:7c:
5b:79:2e:67:10:84:5c:27:98:ba:99:26:b4:8e:e9:bf:08:85:
4e:ea:d1:cd:4e:6c:5a:e4:7b:d1:65:8a:0b:9d:f0:e0:8b:fa:
94:f9:a2:d5:e3:42:64:3c:e8:26:1e:7c:b2:12:eb:94:32:96:
b2:ec:7f:30:4c:c3:0b:00:a4:0e:94:11:eb:1a:ef:57:35:91:
d8:ad:23:22:59:af:0e:ac:29:2e:cd:0d:99:2a:d4:ca:9b:5e:
87:7c:16:24:73:a4:00:ff:95:26:4c:f8:d8:1e:0d:ab:b8:5a:
47:45:05:c2:1f:3c:d3:60:e5:59:c2:91:fa:98:39:c1:34:af:
c9:0c:ef:2b:f4:6e:19:fe:50:13:a5:c8:56:01:ce:ea:28:6a:
19:75:b7:25:74:72:c7:93:d4:bc:db:a2:dc:c1:c8:db:35:6c:
15:71:e0:8d:93:c6:b4:63:31:bb:c0:1a:3e:ff:f0:8c:0e:fd:
93:66:3d:1e:ee:cd:2e:5c:3b:7d:55:a1:82:51:53:df:c9:24:
69:f6:b2:4c:86:c3:3e:75:dd:9f:2e:c9:f1:82:2f:7d:60:dc:
d6:0d:07:ae:e6:c1:dd:ee:1c:1e:c6:69:87:ab:59:9c:7c:69:
22:fc:a6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:19:08 2025 by rpki-client