Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
File: LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer (raw, json)
Hash identifier: JZ6T5g3TNjFJM5QyfpTXDANdiRJnzTXzhOIkCcditJ4=
Subject key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D63DFBDA87FB0A8C47728286E2F6A1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.235.236.0/22
IP: 2a0d:8100::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3d:fb:da:87:fb:0a:8c:47:72:82:86:e2:f6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:59:8d:42:05:12:97:55:e5:de:cf:38:32:
e6:f1:f1:61:29:0c:4e:71:5f:9b:aa:4d:9e:50:3a:
af:ff:e6:42:c6:aa:f6:b6:16:f4:cd:6f:6d:09:51:
75:86:f7:5f:11:87:6b:bb:4d:f0:95:4a:4c:8e:ef:
4c:64:cd:07:70:6c:aa:5b:cf:51:3a:9b:6a:76:74:
f4:c2:c1:ce:d5:af:43:5e:95:90:42:a8:12:d6:55:
36:0b:69:c3:3d:48:06:7f:cf:ec:9b:f8:49:d0:f9:
66:82:fb:4c:44:ff:10:14:7d:85:0b:8d:c0:59:3e:
a0:1b:57:5d:ae:b4:be:c3:ac:2f:ff:02:a2:94:03:
05:f6:7e:4f:3d:56:32:d0:f1:de:80:59:cf:30:c0:
58:4a:64:c7:8a:8a:a5:93:95:e5:44:2a:7e:04:5b:
3a:e2:aa:b1:73:05:e5:ac:e6:d2:9c:99:3b:61:f1:
ec:85:38:0a:25:3f:1a:4b:5f:c7:be:fa:6d:ad:ed:
21:57:20:32:bb:47:d1:de:bc:cd:f5:09:c8:9f:00:
5b:44:a1:2e:81:eb:02:de:5f:c1:65:74:60:2b:f7:
47:93:73:be:bb:6b:f7:96:f8:74:f9:6a:be:2b:34:
20:d3:eb:dc:54:ae:9b:77:b6:9b:97:4e:0a:5f:45:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.236.0/22
IPv6:
2a0d:8100::/32
Signature Algorithm: sha256WithRSAEncryption
80:e7:f1:b5:02:c1:ff:c3:54:9d:42:27:10:96:c3:85:1b:a8:
49:46:d2:23:8b:8e:88:12:f0:35:2e:29:f6:e2:9d:a1:6e:4f:
8c:7d:78:07:c4:9c:a6:8d:26:ec:59:3c:e2:7a:e0:9e:4b:6e:
3e:00:ac:62:0b:64:fd:b9:d7:2e:0f:dd:f9:9d:61:c1:5f:58:
39:19:43:d8:98:fc:7c:ef:ec:48:1d:92:01:3d:fc:bf:96:42:
e8:37:43:80:81:71:5a:58:45:b5:27:02:e6:8e:9f:0e:aa:86:
9b:ab:68:30:2f:b5:54:56:68:3c:39:06:3c:14:f5:64:d2:da:
ee:8e:b3:9c:57:e3:61:92:88:18:24:f8:d6:03:6e:ca:be:35:
e9:56:a5:56:c7:0d:0e:ef:68:b8:ce:a1:69:74:fa:a8:f1:49:
26:23:65:97:97:71:65:fb:df:ee:e5:8b:3b:76:93:7f:22:35:
6e:79:b0:c7:e3:22:44:35:2f:98:3c:36:bb:a3:dc:ce:c6:38:
06:67:96:5b:fc:38:16:22:c0:ce:35:1f:fd:97:46:7a:2a:4b:
f4:a2:c8:25:43:b5:9f:27:eb:41:04:0a:ea:c4:48:06:f3:f3:
36:84:5a:a2:53:f8:c5:55:d6:2b:87:5b:3a:15:d8:22:f1:79:
1b:41:5b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:17:54 2025 by rpki-client