Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer (raw, json)
Hash identifier: trEhIiJ/bqIhqpaXltFtRk44rHCk6evEziMbk0nRH74=
Subject key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01948ED7A7F0BC25E1AE3518915C7AAC8474
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 22 Jan 2025 16:28:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.241.0.0/23
IP: 193.105.108.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:d7:a7:f0:bc:25:e1:ae:35:18:91:5c:7a:ac:84:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 22 16:28:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f3:e1:2b:1f:14:ca:2d:bd:cc:1b:f2:93:58:
9c:6e:3e:86:ae:d1:fc:5f:6a:0e:7b:94:44:d8:fc:
9a:26:ec:ef:48:bd:95:2e:5d:b3:1d:6b:5f:45:55:
7c:bf:a2:17:70:ab:c7:94:19:5e:0e:6c:53:24:79:
13:f3:74:32:5f:76:6d:16:3c:5c:40:36:7d:e1:fd:
20:f4:0d:4f:b7:f4:72:4b:a5:db:92:9d:45:95:ea:
c6:6e:e7:c5:48:88:dc:fd:09:60:f4:6b:a0:89:42:
54:ae:06:f8:6b:44:f3:4d:e1:d8:84:c9:17:6b:7b:
2e:4a:f4:38:d5:44:e4:9b:43:28:0d:ba:b8:c7:28:
b0:82:99:18:eb:19:9c:3b:b3:76:23:88:59:ce:bc:
5d:c1:20:b9:14:07:2b:bf:81:3f:68:b9:65:04:98:
a7:ef:21:99:3c:96:9e:67:0d:62:c4:f3:50:60:81:
d6:1b:9b:cf:c8:81:9d:b7:36:dc:f6:02:ea:a8:a3:
e9:a7:d2:f4:1d:ca:7e:2f:26:b6:b0:38:e3:54:fb:
83:0e:35:51:ed:31:ae:39:97:b8:08:c4:c3:f3:a4:
45:51:6d:6b:84:32:46:98:38:31:b4:1e:85:d4:94:
3d:35:f3:56:c2:28:7e:06:9b:77:db:34:94:53:e6:
af:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.0.0/23
193.105.108.0/24
Signature Algorithm: sha256WithRSAEncryption
02:81:92:a1:59:32:33:35:15:e9:a3:33:a4:f4:d7:81:ee:97:
c8:17:64:67:d3:77:9b:1d:d3:96:10:0d:3d:64:a5:e8:81:f2:
aa:80:50:0a:10:09:e9:73:66:88:cf:ae:61:92:34:1d:2f:11:
00:d2:03:8f:96:a4:17:61:b4:78:91:73:1b:de:34:5a:5d:69:
6c:c1:5e:32:7c:50:94:72:9a:30:20:e1:86:5f:da:63:83:84:
8a:15:2e:07:81:1d:36:26:dc:cf:d9:0b:7f:33:5d:ac:1b:d7:
67:35:fa:e4:ff:2d:d6:72:6c:0b:f3:e9:0c:b8:24:e4:9d:80:
60:b6:3d:74:2b:23:56:a2:72:13:8e:e2:8e:9d:a5:be:b3:f4:
ca:e6:f1:c1:b0:5f:61:7c:c0:2f:08:bf:03:ce:fd:b3:9f:b7:
fb:9d:c2:32:5d:1e:fd:d9:55:49:2d:e5:c5:cb:59:50:07:e6:
a9:95:2c:be:d4:60:21:fb:b3:cb:94:82:0d:1f:21:de:8b:25:
a8:ff:9f:51:8b:75:00:0d:b9:2d:1f:b1:cc:8e:99:7e:e1:7d:
19:eb:8c:a0:b9:cc:7e:d1:68:21:a1:35:73:e4:ca:a5:f3:8e:
79:8c:b9:6d:a6:66:26:ca:14:74:9e:ae:ac:f3:77:46:bc:57:
e2:32:f9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:02:26 2025 by rpki-client