Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FUNQKjLkt-H_DwIulTDcayMmnYo.cer
File: FUNQKjLkt-H_DwIulTDcayMmnYo.cer (raw, json)
Hash identifier: MX11X4zqHAcxT7CNnP1lr/9/q8toKZSToU32zE24byk=
Subject key identifier: 15:43:50:2A:32:E4:B7:E1:FF:0F:02:2E:95:30:DC:6B:23:26:9D:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427479772AF483F6044DB8CE19BBD3B53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/FUNQKjLkt-H_DwIulTDcayMmnYo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.93.78.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:97:72:af:48:3f:60:44:db:8c:e1:9b:bd:3b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1543502a32e4b7e1ff0f022e9530dc6b23269d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:5c:98:f8:56:1a:63:7e:67:56:0f:d4:98:
ac:f7:25:06:64:5a:66:a8:e1:e3:20:ef:06:d1:68:
51:ce:b4:52:cd:43:6c:a5:3c:95:a7:81:81:d6:d5:
38:4f:3f:42:25:c0:cc:f7:3f:cc:11:59:a5:6c:99:
f1:54:cf:2a:9f:34:9a:15:c9:7d:47:a5:d9:13:23:
7e:15:f4:71:d5:0e:48:a8:dc:49:95:7c:37:eb:7a:
ec:be:d4:e5:7f:d6:00:f7:20:e0:c2:48:1c:bb:06:
71:3f:c4:eb:08:03:52:c8:07:bf:d6:3b:30:9b:86:
df:51:69:26:86:f5:a1:f1:00:c3:81:2e:fc:01:be:
01:6b:21:4b:9d:de:f3:35:c3:a1:65:54:22:66:b5:
40:8b:34:7c:db:80:0c:21:a7:25:7a:31:04:fc:fc:
97:de:1b:7d:63:c4:5b:c8:9b:eb:64:af:32:19:63:
29:d1:48:ab:4b:40:12:cb:64:49:db:6c:79:4d:28:
93:29:b2:c7:d2:04:39:fe:63:01:82:4b:0c:c7:05:
e1:41:07:81:f8:1c:fa:8c:f0:ff:05:c8:0f:57:05:
32:4c:8c:b8:29:94:46:53:43:09:89:12:a4:4f:e7:
f4:70:26:d0:93:87:8d:e8:0c:1b:2c:0e:ae:f0:71:
ca:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:43:50:2A:32:E4:B7:E1:FF:0F:02:2E:95:30:DC:6B:23:26:9D:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/FUNQKjLkt-H_DwIulTDcayMmnYo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.78.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:8e:2c:2c:8e:7a:67:d6:88:24:84:69:c3:4d:e2:29:88:42:
36:6d:d9:0d:b4:1e:4c:76:6d:07:b9:fa:d9:b8:52:44:7f:85:
06:84:08:b4:c3:9a:db:f0:6b:22:8c:ed:24:5d:18:8d:d6:ee:
c8:18:53:fb:ae:62:e2:83:03:f4:70:70:fd:2c:e6:5b:10:71:
c3:c8:7e:a6:a2:cc:34:0a:d0:51:21:ac:bb:22:ff:72:c5:bb:
8c:c6:57:8e:34:bc:70:f1:f6:00:83:87:cf:72:69:7a:69:a6:
43:3d:dd:5c:27:ff:36:ae:b0:36:45:9c:18:7d:2f:80:f3:6c:
61:3a:97:c9:c3:03:fa:fb:d3:a7:1a:34:14:1e:1c:76:b3:80:
18:54:6c:8e:48:b5:ac:07:e5:79:66:df:0e:40:ac:b8:4c:17:
f7:d5:fa:94:5e:10:e7:20:1c:2f:84:7f:dc:b8:00:2e:4b:93:
8d:7c:8e:ea:6b:b8:7b:7d:ef:e7:cc:ca:a8:2c:58:9e:fa:c9:
f1:79:18:c7:6b:2c:b1:3c:d9:fd:a2:10:a5:d5:38:29:21:39:
21:a4:f4:c3:9e:26:17:3a:a2:3a:d9:84:01:74:e8:b9:66:52:
b4:c0:7d:b6:e6:bd:63:f9:1b:ef:e5:93:cc:4e:2c:26:d7:bc:
e2:18:f4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:08:11 2025 by rpki-client