Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
File: SmRMEVaFGAPzet7sCHbM-YnVrvA.cer (raw, json)
Hash identifier: JVX5Nq5r+/+626Ugv8bjpaxJowif+Ob45GLaSHrI+TI=
Subject key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BDDC3B980E57E4CC5A53792EF6B88
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.152.124.0/22
IP: 185.1.155.0/24
IP: 194.5.96.0/22
IP: 2a0f:5700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:dd:c3:b9:80:e5:7e:4c:c5:a5:37:92:ef:6b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:fc:3c:ff:c9:7c:fe:86:13:e6:56:37:8c:
5a:10:77:b0:b3:2c:22:88:9d:01:99:6d:ed:70:8b:
cc:17:3c:41:aa:9d:ae:67:8b:4a:ad:35:bc:8f:bd:
2b:e6:61:b3:fb:ea:e5:9e:18:3a:d7:a4:f9:7b:15:
78:a8:7d:38:3c:21:61:83:e2:d8:6a:6a:23:ab:2f:
5b:6f:5e:2a:09:2e:aa:9a:34:c8:7b:a0:88:9f:68:
50:7c:82:51:41:23:fc:12:40:2d:2f:3e:2d:7b:33:
39:0f:43:3e:4f:c8:62:54:6f:a8:8f:b4:59:5e:ec:
62:c1:2e:38:32:cc:8a:b0:69:42:bf:b7:3a:96:df:
24:7e:a5:f0:70:73:6c:a6:b1:8f:d9:8d:e6:1e:88:
52:d4:29:33:75:4e:63:c2:4e:03:d5:3f:d8:8f:79:
b6:89:a9:c7:eb:c6:22:ad:43:db:31:2e:7f:3b:1c:
0e:bb:28:bb:13:4e:94:a1:e0:44:2e:3e:5a:05:57:
35:7f:1f:50:be:3b:f6:c7:05:97:ed:b7:f9:59:81:
23:44:a5:92:89:21:ce:e1:4b:55:6a:4d:d0:da:3d:
1f:69:fe:22:62:77:5f:3c:b1:f7:2a:dd:68:87:9b:
b5:d7:80:c4:dd:dc:ca:1e:d6:d1:ce:f1:3b:50:38:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.124.0/22
185.1.155.0/24
194.5.96.0/22
IPv6:
2a0f:5700::/29
Signature Algorithm: sha256WithRSAEncryption
4c:56:75:20:62:17:56:8d:e6:42:5c:14:96:5b:5f:85:ff:b4:
21:e9:75:18:b4:25:77:3a:fd:62:c4:53:b2:7f:d0:fa:44:29:
99:88:ad:e6:31:5e:d9:fd:f2:3e:09:80:64:d0:4a:0b:e9:f2:
15:89:5b:af:3c:e3:15:5a:5d:81:91:ea:c4:e4:49:8d:3d:95:
24:82:53:34:e3:32:0f:47:88:ea:af:64:5d:fb:ef:dc:47:e2:
61:7a:7f:18:09:a7:a3:91:f3:55:0d:34:01:e0:f7:4f:be:56:
97:41:18:48:a1:ee:fa:db:49:f3:f0:9d:0e:f9:e5:5d:88:f0:
d1:07:72:fe:d0:00:b2:24:3e:7a:0a:ce:22:98:dd:86:c0:bc:
18:40:ac:1c:10:41:f8:47:ab:74:4c:7d:af:59:49:d6:79:cc:
ae:72:92:a7:1f:19:13:ce:21:0c:15:2a:7d:6e:02:04:55:5a:
64:73:07:b4:23:12:d0:ad:36:f4:2c:c0:42:3a:49:0e:1e:f7:
f1:3f:a8:79:7c:21:61:68:9c:4f:f6:3e:9e:4f:2e:e6:3b:8e:
20:0d:49:d3:e1:dd:19:54:4c:ef:ea:cd:b7:a5:5f:01:7b:8a:
24:a7:ba:dd:9c:ca:32:b8:38:cc:83:4b:65:a1:82:9d:e2:5b:
15:47:04:a0
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZQma93DuYDlfkzFpTeS72uIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTY0NGMxMTU2ODUxODAzZjM3YWRlZWMwODc2Y2NmOTg5ZDVhZWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsL8PP/JfP6GE+ZWN4xaEHewsywi
iJ0BmW3tcIvMFzxBqp2uZ4tKrTW8j70r5mGz++rlnhg616T5exV4qH04PCFhg+LY
amojqy9bb14qCS6qmjTIe6CIn2hQfIJRQSP8EkAtLz4tezM5D0M+T8hiVG+oj7RZ
XuxiwS44MsyKsGlCv7c6lt8kfqXwcHNsprGP2Y3mHohS1CkzdU5jwk4D1T/Yj3m2
ianH68YirUPbMS5/OxwOuyi7E06UoeBELj5aBVc1fx9Qvjv2xwWX7bf5WYEjRKWS
iSHO4UtVak3Q2j0faf4iYndfPLH3Kt1oh5u114DE3dzKHtbRzvE7UDgv9wIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFEpkTBFWhRgD83re7Ah2zPmJ1a7wMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5LzZiMDc5
OC0zZDRmLTQwZTYtYjczOS1jYzFjOWI1ZjY2NDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvNmIwNzk4
LTNkNGYtNDBlNi1iNzM5LWNjMWM5YjVmNjY0MC8xL1NtUk1FVmFGR0FQemV0N3ND
SGJNLVluVnJ2QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQCLZh8AwQAuQGbAwQCwgVgMA0EAgACMAcDBQMq
D1cAMA0GCSqGSIb3DQEBCwUAA4IBAQBMVnUgYhdWjeZCXBSWW1+F/7Qh6XUYtCV3
Ov1ixFOyf9D6RCmZiK3mMV7Z/fI+CYBk0EoL6fIViVuvPOMVWl2BkerE5EmNPZUk
glM04zIPR4jqr2Rd++/cR+Jhen8YCaejkfNVDTQB4PdPvlaXQRhIoe7620nz8J0O
+eVdiPDRB3L+0ACyJD56Cs4imN2GwLwYQKwcEEH4R6t0TH2vWUnWecyucpKnHxkT
ziEMFSp9bgIEVVpkcwe0IxLQrTb0LMBCOkkOHvfxP6h5fCFhaJxP9j6eTy7mO44g
DUnT4d0ZVEzv6s23pV8Be4okp7rdnMoyuDjMg0tloYKd4lsVRwSg
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:33 2025 by rpki-client