Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
File: FO-9HV4axzX28jUJzyoOtKH5tOk.cer (raw, json)
Hash identifier: Go84vSmokxhbKCnAb91zzyRZMTXd7ehK5tWB0cXTbp8=
Subject key identifier: 14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC00930C0F4A97B823BDF4AC455188
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.169.68.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:00:93:0c:0f:4a:97:b8:23:bd:f4:ac:45:51:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:2f:8d:4b:9c:ad:ac:60:f6:ae:04:f8:b5:
a6:c4:d0:45:64:c8:81:33:c0:0e:9e:b9:a7:ed:f1:
85:f4:46:76:69:c3:a6:e6:33:b9:fe:53:25:46:6c:
12:76:d8:ca:bd:85:b0:0e:47:fe:09:49:6c:99:1d:
ea:d1:f6:77:7a:06:15:69:ee:e1:0b:85:75:4e:7b:
a6:69:bf:40:82:5e:a5:b7:54:2c:dc:fd:8c:7b:3c:
43:f0:ea:4d:e5:18:90:d9:3d:cb:4c:fa:f7:9f:7e:
26:3f:83:e7:33:64:0f:bc:c4:0a:4c:98:71:dc:4e:
e6:f9:f3:51:c0:63:d9:1b:cb:63:d7:91:0d:fc:70:
7d:c9:af:cc:d8:af:0a:5b:e5:13:f3:5a:65:9c:bc:
8a:15:4f:fd:59:69:5b:98:81:02:a9:d4:99:d3:d7:
55:d9:0e:8b:49:06:25:0e:d8:c2:a5:1b:85:d1:b3:
ed:3a:c9:2e:a7:26:e3:f5:4c:45:6e:75:71:7e:bd:
ae:b3:80:f0:3a:31:59:05:86:f6:53:6f:8c:a6:37:
a8:0a:23:8d:45:f0:c1:0b:9a:d9:8a:90:d3:cb:bc:
85:da:d8:aa:ed:58:e2:03:50:32:dc:fa:b1:1b:7b:
0e:b5:4f:7e:2b:53:75:eb:42:a1:d6:90:f9:29:52:
08:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.68.0/23
Signature Algorithm: sha256WithRSAEncryption
63:01:ea:ad:e5:e1:79:22:92:f9:06:ee:98:dd:d7:91:76:c4:
22:47:1e:7b:e5:3d:31:53:e3:26:38:cb:76:a7:ab:59:6e:f9:
02:ea:24:3a:ef:47:6b:d3:a0:83:d6:19:a5:93:58:55:55:ce:
fe:38:da:d2:f3:85:2a:6b:75:da:69:af:28:2a:03:fd:75:7b:
0b:25:12:e1:33:40:08:de:39:dc:75:25:73:84:0e:85:6e:03:
41:45:ce:8a:1b:af:8b:66:f4:83:a1:ee:fc:88:4f:56:15:fd:
db:f8:4a:c8:01:e6:36:8e:6e:44:f9:84:94:cd:46:52:c7:01:
57:f5:b4:94:6f:06:81:89:17:a3:1e:91:ed:3f:5e:5c:44:1a:
6b:e3:57:a7:d9:98:41:a4:1a:45:e6:42:9e:e6:ec:7d:13:89:
8e:73:e9:64:5e:e2:ac:c6:a1:ca:45:83:1c:04:9c:0d:21:c9:
af:b1:60:43:8d:e1:50:31:99:6b:98:46:83:ae:49:37:b9:fc:
0e:f7:b1:f3:7c:ee:90:3f:0b:88:a7:96:0d:09:b3:38:92:d5:
cc:d9:44:16:1a:cd:fc:ce:6f:99:2f:e0:11:05:3b:9c:7a:cc:
46:e4:74:5f:90:0c:b7:38:67:c1:3d:c9:d9:b1:15:43:48:67:
d5:a9:59:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:57:53 2025 by rpki-client