Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
File: IwWuBiEvPC-PVzoLVJJEHljyHE4.cer (raw, json)
Hash identifier: BurVI1pFtuR8zRiAWCP+nwTimYlnXEgWILmDP+oOx+4=
Subject key identifier: 23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214445803B86201FC0673F1A561F27F7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 92.119.48.0/22
IP: 2a09:b5c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:45:80:3b:86:20:1f:c0:67:3f:1a:56:1f:27:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:98:55:4c:7a:24:ed:3e:f1:e9:8e:59:ca:5b:
05:9d:e4:a1:48:76:29:41:b3:cd:69:16:8c:75:40:
61:f4:f5:03:42:60:ab:4c:12:2e:78:77:d3:67:84:
d2:91:3a:ac:3f:e9:92:db:f6:e0:03:63:ef:e9:29:
b1:ff:85:fd:b8:b8:60:57:39:d2:42:07:81:58:ee:
a1:71:5f:03:6a:91:4c:69:6b:33:8a:c7:5f:1e:02:
47:a9:bb:35:4f:c0:96:3c:78:3c:49:e3:63:4e:d0:
13:ca:e3:31:36:89:56:2e:58:63:9a:5b:b8:cd:de:
61:16:ab:1b:3b:3d:cf:1e:cd:e3:1c:38:0e:b9:c7:
fb:8e:76:da:d5:0d:16:14:d0:68:3c:22:f5:22:c3:
89:12:90:b8:e0:19:aa:ba:59:72:6e:45:0e:f7:43:
75:07:0f:5f:34:3e:c7:12:64:00:77:a1:e7:34:73:
b8:1a:4d:f0:ea:02:d5:71:40:ba:bb:5c:fc:63:a8:
8b:03:60:72:dc:86:c0:8a:0b:c0:f4:47:38:67:1c:
0f:8b:9e:cb:7b:bf:f3:65:25:ff:00:f4:0b:df:ce:
e6:b7:52:c9:5a:9e:4a:c0:38:95:1f:83:c9:33:6c:
ff:41:4c:4e:ff:46:f9:58:98:6a:c3:c2:95:c9:e4:
f9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.48.0/22
IPv6:
2a09:b5c0::/29
Signature Algorithm: sha256WithRSAEncryption
18:30:f3:19:8a:1c:32:4b:37:87:77:8f:ec:34:cc:8b:83:14:
82:f0:ca:5f:70:3b:bf:12:2b:8a:5c:74:5e:18:8a:2f:07:fd:
df:6c:09:3e:3c:82:82:fd:fe:5b:a5:08:99:b5:6d:a5:8d:b1:
ed:3f:f5:c1:7b:77:27:b0:02:ca:f5:05:b7:e6:a0:36:d1:c7:
fa:f5:cb:af:47:44:7e:91:89:7c:ab:23:60:e1:fc:30:7b:da:
38:42:0d:50:e2:ae:b0:8e:38:ce:2e:1b:42:36:1a:36:b8:51:
cd:27:53:59:c8:60:b6:8f:94:31:b0:44:4f:93:c5:29:f0:63:
15:e2:a9:db:e8:19:90:26:d7:ba:58:f2:e1:78:be:d4:24:1d:
c1:c3:a2:58:1e:b8:04:54:35:ea:b8:ff:69:1f:d8:72:98:3c:
25:71:ec:d1:8c:68:85:91:e9:a7:32:5d:76:8f:7c:cd:e6:43:
df:eb:59:09:eb:15:26:eb:60:9d:e9:de:70:91:e9:b7:e5:ce:
9f:85:4f:a7:6a:2b:aa:de:ec:5a:d3:c6:d2:d3:18:9d:a3:df:
94:7f:8f:47:a8:78:e3:71:f9:ed:78:b0:46:1c:91:c9:36:9f:
79:ac:54:62:da:94:4d:83:a6:38:cb:36:e4:0c:0c:5d:57:33:
34:37:90:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:46 2025 by rpki-client