Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
File: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer (raw, json)
Hash identifier: 0zzFjQGz9hQlmL+3J+aNxeoW+aBjku9Brqoc8mcQCCc=
Subject key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D73B6D5F6DF92D25004D356B1FC757
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.67.72.0/22
IP: 2a10:d600::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:3b:6d:5f:6d:f9:2d:25:00:4d:35:6b:1f:c7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e872826fce02bd9485ef276641d2b584f599b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:4d:0e:cf:5e:59:ae:35:39:e8:82:05:78:
f8:c3:4a:c7:7c:d3:95:ae:69:1a:22:ff:50:ee:dd:
e6:34:c6:97:57:3f:3c:0b:7e:a6:c9:63:18:40:37:
15:06:41:da:83:37:7b:c5:86:da:2d:e5:12:d2:8e:
62:44:29:1a:6a:83:fb:ba:f7:fa:43:6c:0e:a1:57:
06:33:62:7b:bd:b8:46:f2:0a:de:e4:ec:20:ae:95:
b9:60:d9:c3:e5:dd:41:71:34:39:d4:63:1b:91:89:
04:83:3b:49:35:b4:a2:8f:93:45:7d:e3:b1:53:e6:
3c:4b:3f:3d:1d:72:5f:a2:ac:c4:ea:4f:86:05:58:
b6:2d:60:d8:9e:b7:d3:37:72:59:34:ff:4c:47:ec:
b4:8e:e6:70:14:aa:13:56:5a:16:58:3f:bf:6b:2f:
c3:b9:31:de:d1:5b:34:1b:8e:d8:85:a4:7a:05:81:
7f:40:53:ed:48:50:0f:31:ba:5f:fd:d0:14:f4:11:
3e:84:b9:8e:28:3d:c7:90:5a:5b:5d:9f:30:30:bd:
6a:91:31:a4:a4:15:a1:15:32:be:0d:0f:61:b6:2e:
3d:eb:98:15:7c:72:1e:f5:bd:99:61:7c:7e:eb:b2:
e1:b7:12:41:b2:38:c2:6f:03:52:b1:e0:1c:7f:0a:
fb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.72.0/22
IPv6:
2a10:d600::/29
Signature Algorithm: sha256WithRSAEncryption
9b:8f:6d:c6:7a:0d:f0:8e:3b:60:39:31:ba:f0:9f:b3:22:8f:
3a:ad:34:a2:90:b8:d9:08:bd:a1:a4:85:fb:6e:0a:71:10:03:
9a:5b:8c:e2:49:f0:c2:a7:b4:2d:0c:32:0f:d9:d9:45:51:82:
66:47:42:e5:1b:06:cd:d8:53:13:38:04:4d:a6:d3:00:00:da:
8e:9b:5e:95:f6:32:9f:3b:7d:ce:85:c3:4b:9b:b7:7b:eb:8d:
13:6c:18:f6:f2:af:ba:61:c1:cf:77:e5:a2:b0:57:e2:d4:2e:
b3:53:d4:0b:d1:55:3f:f4:0b:9c:a3:84:53:c3:41:98:1a:14:
38:78:c6:65:a2:61:1e:55:bf:57:35:63:ed:98:be:07:c0:ac:
ba:44:30:0b:ce:63:1a:f3:ca:28:82:5e:82:a1:fe:07:63:d6:
83:05:57:ba:f0:2e:79:95:9f:13:36:13:3d:96:8e:05:69:e5:
43:43:be:43:a7:7c:02:0f:2b:af:be:df:1c:19:39:4f:3b:4e:
da:6a:cf:78:27:fa:50:dd:df:fd:60:b6:4f:16:52:22:2f:eb:
e2:24:e9:c4:09:6a:96:fe:94:6c:1f:81:1a:04:5d:05:e3:ba:
40:80:36:1c:70:96:42:10:22:02:ec:23:0d:6c:7d:60:72:3a:
7e:70:d8:9a
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQj1zttX235LSUATTVrH8dXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTg3MjgyNmZjZTAyYmQ5NDg1ZWYyNzY2NDFkMmI1ODRmNTk5YjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycJNDs9eWa41OeiCBXj4w0rHfNOV
rmkaIv9Q7t3mNMaXVz88C36myWMYQDcVBkHagzd7xYbaLeUS0o5iRCkaaoP7uvf6
Q2wOoVcGM2J7vbhG8gre5OwgrpW5YNnD5d1BcTQ51GMbkYkEgztJNbSij5NFfeOx
U+Y8Sz89HXJfoqzE6k+GBVi2LWDYnrfTN3JZNP9MR+y0juZwFKoTVloWWD+/ay/D
uTHe0Vs0G47YhaR6BYF/QFPtSFAPMbpf/dAU9BE+hLmOKD3HkFpbXZ8wML1qkTGk
pBWhFTK+DQ9hti4965gVfHIe9b2ZYXx+67LhtxJBsjjCbwNSseAcfwr7BQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFC6HKCb84CvZSF7ydmQdK1hPWZs3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzFiY2Vm
NC0xMzFkLTRkYjUtOTRjNy0yNGM3OWIxY2I0ZGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvMWJjZWY0
LTEzMWQtNGRiNS05NGM3LTI0Yzc5YjFjYjRkYS8xL0xvY29KdnpnSzlsSVh2SjJa
QjByV0U5Wm16Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLUNIMA0EAgACMAcDBQMqENYAMA0GCSqGSIb3
DQEBCwUAA4IBAQCbj23Geg3wjjtgOTG68J+zIo86rTSikLjZCL2hpIX7bgpxEAOa
W4ziSfDCp7QtDDIP2dlFUYJmR0LlGwbN2FMTOARNptMAANqOm16V9jKfO33OhcNL
m7d7640TbBj28q+6YcHPd+WisFfi1C6zU9QL0VU/9Auco4RTw0GYGhQ4eMZlomEe
Vb9XNWPtmL4HwKy6RDALzmMa88oogl6Cof4HY9aDBVe68C55lZ8TNhM9lo4FaeVD
Q75Dp3wCDyuvvt8cGTlPO07aas94J/pQ3d/9YLZPFlIiL+viJOnECWqW/pRsH4Ea
BF0F47pAgDYccJZCECIC7CMNbH1gcjp+cNia
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:49:01 2025 by rpki-client