Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer (raw, json)
Hash identifier: YZQARKE5weKR928+Iw+pedcuNREYHoir9Oe1tF6AnMQ=
Subject key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B4009489130411B3958A9E954D2BFC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.141.67.0/24
IP: 194.120.16.0/23
IP: 2001:67c:2e58::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:00:94:89:13:04:11:b3:95:8a:9e:95:4d:2b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:5b:d1:eb:6a:e5:dd:5d:68:2a:ba:ae:1e:
99:c2:0b:52:b5:db:e7:13:a9:46:6c:c1:02:d8:cb:
07:d3:dd:71:0a:ee:63:dc:a6:57:c2:59:b5:0b:cd:
50:48:36:2a:f4:59:4c:7f:9a:15:f9:2d:7e:a9:89:
bb:e5:16:1e:d1:23:1b:6b:34:d3:3b:82:c2:f5:b7:
c5:95:a6:bc:e6:ae:dd:42:54:aa:d9:97:4b:3a:47:
9f:47:4b:5c:9d:7b:67:b7:74:24:77:8e:03:26:9e:
40:16:e0:48:65:3a:44:5e:73:f8:b7:1a:b2:8b:2d:
df:ff:33:29:a9:22:3a:eb:c0:5d:ad:e4:d9:7c:29:
f1:31:94:a4:fe:ca:3d:fd:d9:e6:fa:95:ed:56:e4:
aa:87:34:51:6f:84:74:46:23:cb:74:3f:63:42:b7:
9b:25:f6:90:e0:6e:a3:67:b6:08:70:40:8d:cf:64:
cf:e0:f1:c2:24:09:16:85:93:dd:ea:e3:ae:20:f8:
c3:ca:ff:8d:92:d3:b0:41:8f:6d:fb:95:6f:9b:df:
51:61:77:06:00:0f:5f:73:d0:5e:f0:8b:88:8e:23:
45:94:de:78:32:52:0f:ad:ba:80:5f:0e:ea:97:ba:
b2:06:aa:e6:a6:54:8c:1a:e0:6c:26:56:51:b8:07:
6a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.67.0/24
194.120.16.0/23
IPv6:
2001:67c:2e58::/48
Signature Algorithm: sha256WithRSAEncryption
3a:bf:6b:6a:69:63:d9:b8:63:0d:39:e7:4f:0c:cb:b6:8a:7c:
d9:54:ea:43:04:33:ef:37:9f:2d:39:ab:7a:4a:62:55:d4:1f:
1d:6f:dc:df:d8:36:70:1a:de:7f:ac:9b:81:80:83:e5:1f:8d:
4b:85:e0:02:e0:2d:1a:42:05:68:6d:64:d1:70:2f:81:23:a8:
b2:27:4e:24:c2:cd:a2:d7:51:2b:24:da:9c:42:0a:04:ad:70:
44:c2:2c:ca:16:29:bc:8b:05:9c:ab:5c:c3:96:3f:9d:ed:39:
82:be:a3:3d:e0:5a:a0:15:17:fc:11:58:3e:53:69:69:1a:64:
db:ff:7b:ce:d1:38:16:df:fc:d9:ec:13:1e:56:3f:8c:94:18:
73:cf:37:82:66:04:3a:19:53:d2:3e:60:49:bf:87:4f:31:49:
88:22:d3:19:fa:0c:a0:4c:f9:38:03:f9:f3:fc:26:fb:66:6b:
00:af:e6:88:ba:51:4b:ca:a8:aa:d5:40:66:1f:1b:74:4c:cd:
9f:0d:83:70:e1:43:7e:3b:21:72:cc:e1:5b:14:28:a9:93:3f:
76:18:ce:1f:39:e9:15:ff:a1:42:a8:31:7c:e4:5d:51:b8:df:
1a:cd:23:d8:b2:b0:ba:02:4c:28:72:81:7b:69:c1:09:67:0a:
42:f1:b8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:57 2025 by rpki-client