Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
File: FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer (raw, json)
Hash identifier: dC/8OdAntpgckVMygO/DBKOmUVwhluyqV0JMmuUd3XI=
Subject key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9E596B4B7CA73CBFBA1158CE6359B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:50:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 83.219.112.0/20
IP: 185.74.140.0/22
IP: 2a00:d2e0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e5:96:b4:b7:ca:73:cb:fb:a1:15:8c:e6:35:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1492a20754c9a7650b8279b9390689c469d73595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:01:57:54:2a:9f:b0:9f:e0:5b:5b:bb:39:98:
58:78:bc:e0:c0:10:81:23:cb:ca:67:76:07:04:22:
81:78:ef:93:f4:67:12:e0:80:b3:5f:44:32:db:cd:
3d:58:3b:af:3d:b3:8c:68:ea:ac:fa:39:78:3e:ed:
88:3e:d8:21:a1:fb:c7:b4:b7:ce:0f:34:e4:aa:06:
71:9b:cb:01:48:b0:a8:94:12:03:d3:35:bc:2a:ba:
13:9f:15:eb:7b:8c:6f:88:1c:18:8b:90:26:8a:16:
87:a5:89:0c:f2:0b:7c:9d:e0:0e:38:ee:dc:2b:f8:
33:c0:1d:2f:1a:5a:84:03:20:b4:dd:7f:91:70:6c:
38:fc:29:76:f0:a3:3c:2a:c5:5d:0d:bd:1e:07:4f:
ce:08:0a:1f:c2:56:36:6f:e3:19:b6:ef:11:1b:15:
31:21:53:2a:a1:1e:96:ac:bc:b8:8b:89:97:0f:5a:
96:d9:9e:f1:47:f1:2c:2b:6c:d5:23:bd:c5:14:96:
74:97:72:48:5e:90:b0:f9:1a:d4:02:50:fb:f7:81:
9d:18:88:fb:89:ac:2b:29:7b:f2:19:3c:0b:24:01:
da:91:a4:fa:b6:62:cb:7c:1b:f5:90:f8:84:9f:ba:
88:25:50:87:ce:c1:e9:86:51:4e:4d:5e:0b:6e:61:
8f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.112.0/20
185.74.140.0/22
IPv6:
2a00:d2e0::/29
Signature Algorithm: sha256WithRSAEncryption
69:b7:e2:6d:91:3a:18:51:9d:12:ec:4e:13:66:40:9f:d6:64:
9c:68:0a:0d:4e:7c:71:45:1f:5e:5d:85:fb:00:14:5a:34:87:
2e:28:73:94:da:3e:b1:54:69:77:b3:04:ef:c7:0c:ff:3a:5b:
c1:29:2d:57:9f:76:3c:72:21:00:52:c6:bc:4b:91:1e:b9:11:
eb:be:27:03:95:26:bb:b9:97:d3:b8:77:ad:cd:3d:5e:78:8d:
70:72:df:b0:9a:07:aa:01:d1:c5:58:b8:3e:f5:48:37:c5:20:
99:cf:85:a0:e1:44:30:9a:dd:bd:94:0a:6b:cc:0d:5b:82:a7:
f5:1f:6e:38:84:9d:2f:2c:c2:c5:02:6c:be:69:f8:82:42:dc:
e8:d3:38:38:69:c7:1d:68:74:47:c5:0f:7c:f5:4d:43:a5:c8:
d6:67:76:b4:41:03:69:f2:54:9f:56:b1:2d:8c:e5:db:09:43:
8c:a2:39:da:24:fb:52:57:c8:18:9f:10:3b:49:bd:ec:cd:c3:
b2:8b:6a:ea:cd:6c:a5:62:cc:28:e3:7e:ba:08:cb:68:f1:e5:
e7:ec:0c:ea:21:ec:67:f6:77:eb:ef:16:9e:2b:d3:99:d5:44:
b9:99:7c:06:8f:90:97:cc:3d:d5:4b:2a:62:7b:2d:ac:55:64:
41:c1:de:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:57 2025 by rpki-client