Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
File: MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer (raw, json)
Hash identifier: icgkBe0Zd2BFxctiOyJjOPDPtWGXEEYB7fdxGoylGdw=
Subject key identifier: 30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942369587412F75D502AC835801CA62599
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:26e4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:58:74:12:f7:5d:50:2a:c8:35:80:1c:a6:25:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:06:67:62:ac:bd:ca:e1:2a:8b:73:dd:f7:
63:8c:b1:41:cc:67:3c:34:d2:b8:9b:12:bb:63:2b:
fd:36:5a:43:16:1a:a4:de:73:45:df:52:86:23:84:
c8:4e:3d:81:2e:70:89:e5:49:7d:92:61:59:aa:cc:
e1:cb:ab:8a:b1:f7:de:ef:66:be:a1:e9:d3:24:2e:
92:1a:a9:e7:cb:ca:e6:35:25:e6:68:dc:6d:97:f5:
b8:49:77:59:78:be:df:d0:68:e2:26:14:09:37:f4:
a5:63:02:4d:27:80:38:65:54:9e:95:02:63:3f:08:
85:99:ae:de:ba:37:44:d2:8a:89:af:bc:e6:71:bd:
57:62:5d:ee:c9:32:85:84:c9:e3:1d:92:6e:07:8d:
cb:98:4b:67:7b:b6:ba:ce:ab:5e:49:15:90:1c:74:
30:0a:ed:11:5c:af:ff:af:81:ce:7a:46:ba:50:99:
95:bc:18:05:df:02:05:9e:c4:19:83:e5:cd:03:9d:
2e:0a:ea:c8:9e:ec:8b:5e:4a:84:52:d6:43:4f:ff:
eb:a0:d7:29:a3:42:e5:0b:53:45:79:4a:9d:e1:7e:
8a:da:7f:0f:08:29:11:c4:07:61:ac:27:22:1d:4e:
c2:38:83:89:48:83:7a:68:40:f6:e1:1e:8b:a1:e4:
62:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:26e4::/48
Signature Algorithm: sha256WithRSAEncryption
0a:a7:d0:96:54:4a:52:20:ff:c0:25:07:3e:21:df:16:0e:67:
c9:f8:22:3f:3d:ae:25:37:84:b7:6d:ad:27:fd:e8:0a:ba:08:
dd:4e:7d:e9:c9:71:81:9d:bc:95:8a:2b:be:3d:72:8f:1e:f6:
f1:86:66:ab:2d:04:59:88:87:07:df:af:a1:f2:5d:98:c0:d1:
e8:3e:c9:6f:9b:27:de:1d:f1:87:ec:73:df:d4:42:41:d4:7b:
22:7a:90:95:e7:c9:e0:1a:ce:b7:32:3d:8d:fb:dd:99:aa:42:
33:61:21:b5:77:9c:87:a5:6f:26:2e:f3:34:a0:42:6e:8f:b0:
98:5b:9c:25:9c:1a:84:ba:62:76:52:ee:1f:74:10:84:22:93:
73:54:1b:ad:05:86:f2:be:0a:e0:e1:cf:1b:d6:29:76:dc:39:
d5:df:7f:a5:34:d5:1f:f2:8b:96:2b:76:26:8f:6f:66:99:24:
13:94:13:64:14:3f:71:18:f1:09:40:06:15:a8:51:70:ef:0a:
8f:3c:fd:1b:1f:eb:8f:db:5f:33:55:84:5c:76:ce:c9:0d:ce:
d3:a5:43:79:a2:f8:b4:e5:d5:02:08:f9:8b:cd:69:8f:c0:1f:
3f:5f:69:b6:9c:3f:3e:64:3f:e1:ef:c8:7d:ef:61:59:a9:ab:
27:40:27:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:04 2025 by rpki-client