Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer (raw, json)
Hash identifier: AdLCYnO+SmFe4Nnuo7Yt6RbRwfj8rmHo0+rp99hmvXo=
Subject key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420683BC50DCFF3602119040029B6B027
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.245.228.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3b:c5:0d:cf:f3:60:21:19:04:00:29:b6:b0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:f1:0b:09:6c:4d:3c:ec:2f:18:15:d2:be:
fa:76:2c:42:d0:e2:ce:c8:a3:63:05:0a:e2:d8:69:
9a:2d:9f:93:29:ae:55:82:b0:77:1b:69:89:cf:9a:
b8:1b:96:71:28:c2:cb:ca:b3:b6:56:69:ea:a2:f8:
9b:b3:c1:45:d8:4e:0a:b4:cb:23:58:82:c0:ba:52:
fe:25:25:73:89:28:7f:2d:6f:d5:8f:10:bd:6f:18:
59:3a:73:35:c3:c9:16:b4:82:68:55:5a:21:1b:9a:
d8:6f:6c:01:b9:02:1a:26:bb:5e:c6:94:5d:c9:9c:
86:dd:4e:71:82:72:e3:af:63:90:ff:06:aa:ac:20:
4b:0b:82:72:14:71:f0:d4:d1:b4:59:c9:da:b6:9d:
e3:cc:cd:e1:db:76:bd:32:40:6d:d4:e6:8f:8e:93:
a9:af:18:62:63:66:f6:f7:b4:08:b0:5b:ec:0f:80:
32:fe:65:c2:87:54:6d:23:ed:99:1e:6b:14:d9:b4:
fc:46:b5:d3:90:3e:04:66:48:7a:18:3b:d8:57:ca:
07:87:d1:34:27:8f:86:ea:76:41:f6:e2:fa:ce:bb:
7e:9b:30:c1:2e:12:8f:a0:a2:d9:a9:72:67:ca:27:
9e:cc:e6:9f:32:d8:e4:7a:ca:d3:af:45:c7:13:1b:
64:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.228.0/22
Signature Algorithm: sha256WithRSAEncryption
31:88:34:be:e8:55:5a:f2:b5:97:11:1d:dd:63:5b:6b:1b:09:
72:13:97:19:e9:de:ab:4f:03:f3:0c:b8:7e:d1:d1:1c:7a:ab:
02:20:15:28:65:f8:55:c1:4f:7c:a1:a8:b4:93:c0:98:65:c3:
6f:ae:8f:6a:65:94:eb:c5:b6:01:53:6b:de:c5:58:5c:78:29:
47:e3:3b:86:62:5c:f0:1d:b5:fb:b3:52:97:32:48:98:80:7a:
be:f4:9e:e6:3d:b9:b4:30:09:eb:9a:df:fb:73:57:a5:a0:3e:
9d:41:9e:c9:db:50:9a:72:72:8e:70:5c:8c:46:c2:1b:08:06:
80:dd:b9:82:2f:57:c7:19:1e:7b:8c:47:c3:e9:53:7b:b7:e6:
fd:75:4d:4a:05:75:7c:b8:e5:c2:87:32:ee:68:80:c2:4f:d0:
9c:7a:c8:c2:7d:51:5f:57:d2:85:b5:79:bc:17:5b:21:42:bd:
b4:d2:22:b4:ca:5e:2d:1e:d3:5a:8f:e3:b4:ca:43:af:81:f2:
a0:ba:de:32:fe:59:b7:42:55:2e:28:de:f3:56:dc:1c:34:54:
fd:ef:fc:a4:91:20:c0:f4:df:0d:10:1d:01:28:0d:46:62:8b:
d0:ff:01:7b:1d:d4:43:71:12:5f:e0:4f:91:7c:85:57:37:5c:
cb:3a:6b:3a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQgaDvFDc/zYCEZBAAptrAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTQ1Mjc5ZDg3ZjhjMGYzOGMzOTBhMzNjZjE2OTk1NTFkYzMwZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscHxCwlsTTzsLxgV0r76dixC0OLO
yKNjBQri2GmaLZ+TKa5VgrB3G2mJz5q4G5ZxKMLLyrO2Vmnqovibs8FF2E4KtMsj
WILAulL+JSVziSh/LW/VjxC9bxhZOnM1w8kWtIJoVVohG5rYb2wBuQIaJrtexpRd
yZyG3U5xgnLjr2OQ/waqrCBLC4JyFHHw1NG0Wcnatp3jzM3h23a9MkBt1OaPjpOp
rxhiY2b297QIsFvsD4Ay/mXCh1RtI+2ZHmsU2bT8RrXTkD4EZkh6GDvYV8oHh9E0
J4+G6nZB9uL6zrt+mzDBLhKPoKLZqXJnyieezOafMtjkesrTr0XHExtkzQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAVFJ52H+MDzjDkKM88WmVUdww/kMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4Lzc2ODM3
OC1kNzliLTQ1YzctYTI5MC05ZDM4NmQwNDZmYjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvNzY4Mzc4
LWQ3OWItNDVjNy1hMjkwLTlkMzg2ZDA0NmZiMC8xL0JVVW5uWWY0d1BPTU9Rb3p6
eGFaVlIzREQtUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCufXkMA0GCSqGSIb3DQEBCwUAA4IBAQAxiDS+
6FVa8rWXER3dY1trGwlyE5cZ6d6rTwPzDLh+0dEceqsCIBUoZfhVwU98oai0k8CY
ZcNvro9qZZTrxbYBU2vexVhceClH4zuGYlzwHbX7s1KXMkiYgHq+9J7mPbm0MAnr
mt/7c1eloD6dQZ7J21CacnKOcFyMRsIbCAaA3bmCL1fHGR57jEfD6VN7t+b9dU1K
BXV8uOXChzLuaIDCT9CcesjCfVFfV9KFtXm8F1shQr200iK0yl4tHtNaj+O0ykOv
gfKgut4y/lm3QlUuKN7zVtwcNFT97/ykkSDA9N8NEB0BKA1GYovQ/wF7HdRDcRJf
4E+RfIVXN1zLOms6
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:31:18 2025 by rpki-client