Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
File: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer (raw, json)
Hash identifier: Hum6NpXP7TIUYIrOglLKlVAM4rK8MqIEcAogiM1Jx4U=
Subject key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942369DA06C0DF272EC690F53CF618A6B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.247.107.0 -- 193.247.108.255
IP: 193.247.110.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:da:06:c0:df:27:2e:c6:90:f5:3c:f6:18:a6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b1a238e043fe063a723b63159015393a64afceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:df:44:1d:2c:d3:18:dd:71:84:89:e9:1e:29:
5f:44:4d:aa:49:67:35:b8:66:69:5d:a1:fa:42:98:
8c:a3:7b:4c:3a:9b:af:35:77:2c:4d:c5:89:9c:a8:
88:9d:7f:11:b4:72:45:da:be:17:d1:37:db:0d:1b:
6f:1f:2a:e3:2f:86:18:d5:bc:63:fb:63:a6:3d:f2:
b8:46:63:57:8b:f6:99:47:0c:27:1e:67:72:3f:71:
48:9b:df:ae:13:f1:1f:f3:d4:83:f8:ec:bc:f2:29:
b4:79:5f:d2:d2:c7:bf:34:32:50:ec:2e:5f:05:28:
54:28:3b:3e:6a:ca:d1:1d:9a:db:2d:6a:6e:6c:e9:
81:fd:f3:b3:b7:fc:a1:6d:40:78:ac:e5:85:df:94:
1a:54:c4:5f:01:b0:0a:45:a6:fd:7c:a1:a8:bc:0e:
de:db:14:40:1f:1a:71:9d:3c:29:09:b6:d0:7e:30:
41:51:2f:8f:da:60:b0:6d:b7:69:18:43:97:de:e3:
1d:5d:fc:17:08:41:41:cf:f3:d0:0b:4d:f3:54:5f:
00:39:15:e4:66:92:24:c2:5a:95:94:1b:ac:be:1d:
24:ed:61:28:6c:9d:07:c0:5d:c8:76:2a:7e:18:fc:
06:67:e9:68:85:bf:10:c6:8e:35:4a:d7:e5:f5:9c:
8c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.107.0-193.247.108.255
193.247.110.0/23
Signature Algorithm: sha256WithRSAEncryption
11:b5:1f:84:28:36:70:1a:1f:37:18:df:30:52:3b:07:86:92:
c5:e6:5f:91:19:99:9c:6d:8a:59:8c:db:b0:ff:fb:34:c2:e6:
35:1f:8e:1e:55:0e:0f:bb:f0:c6:74:1f:be:b2:0a:d9:15:95:
b8:9d:d1:52:46:b0:6a:e2:49:1c:d2:3b:eb:8d:ad:0f:54:a5:
b4:1e:6b:f2:93:ad:a2:47:f2:f3:7f:b1:b4:42:2d:d4:80:fa:
bf:b4:68:8a:ef:16:1d:36:0f:27:3c:3a:2f:33:5b:fb:0e:53:
b9:81:b0:c1:1f:da:30:72:a5:8a:ba:07:3e:60:12:05:87:22:
67:1a:ab:84:e8:84:cf:d8:9d:38:ef:bc:08:e8:09:1c:72:2b:
e4:c1:dc:65:07:19:0e:e4:f7:24:1a:9a:5a:ec:e5:5a:97:08:
04:29:b8:c8:be:ca:3f:b5:5c:48:87:5d:81:98:63:98:de:00:
ef:5d:2e:eb:aa:74:61:cb:f0:37:66:75:f2:67:92:a2:be:bc:
7a:05:6a:a5:37:3b:f6:76:07:57:59:80:fe:54:ea:50:6d:81:
d9:91:fc:d4:94:b3:e6:b8:97:f2:75:a1:37:0b:2a:97:df:5c:
55:93:22:38:7a:c9:d0:58:07:ac:6e:c8:7a:b9:fa:79:2a:b7:
70:17:b1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:22 2025 by rpki-client