Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
File: Sz1GYT0gKWKWebKwSi-chsq8dNU.cer (raw, json)
Hash identifier: BvPG6dIJMuN1vzd2/LTWQzv4hDSRGg8hIJ0linvSrKw=
Subject key identifier: 4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424449560FC12128F622B7567435E20ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.144.232.0/22
IP: 2a07:4380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:95:60:fc:12:12:8f:62:2b:75:67:43:5e:20:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:01:5e:81:43:bf:0f:0f:04:1a:9b:1d:eb:07:
c6:17:41:dd:c5:6d:72:b0:cc:a2:28:81:c4:82:b7:
b9:92:1e:63:f9:14:28:56:d4:14:bd:83:21:f2:c5:
5d:f8:c1:bd:08:aa:29:8e:f9:54:02:05:d8:f8:54:
1e:a6:de:ca:f8:28:92:91:40:5c:eb:dd:17:32:25:
07:5b:e4:36:f2:1b:14:d7:dc:38:e9:9d:93:37:37:
90:b7:cb:1c:95:fc:d4:61:f4:2f:06:95:a6:28:0a:
7f:27:51:14:7d:2a:d8:be:ef:bb:13:3c:7c:1d:f2:
45:97:25:48:3e:8c:d7:e7:0b:c9:fb:d1:1c:92:01:
ff:17:aa:64:66:77:9a:5e:24:fd:9f:2a:98:ba:8a:
fb:1c:25:e9:1d:49:7e:68:ad:42:7e:17:69:16:6b:
cc:c9:f8:78:cc:31:c5:6a:f0:e4:27:24:63:11:af:
d5:09:98:ba:15:05:4a:a4:d8:f6:cb:46:d5:b1:dd:
fc:02:9d:bc:1d:95:8d:9a:bc:58:c1:23:0d:5f:10:
47:d2:be:31:6c:65:9d:16:43:b7:4c:fc:3f:28:91:
41:24:76:cc:ec:57:11:53:aa:f1:a0:12:8c:6c:1c:
c6:0a:56:66:4b:52:95:e0:59:71:5d:e1:bb:13:38:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.232.0/22
IPv6:
2a07:4380::/29
Signature Algorithm: sha256WithRSAEncryption
35:68:db:50:d6:32:28:15:7d:ab:45:30:f0:db:6d:19:1f:a0:
2f:0b:43:ee:13:73:3b:13:76:b4:1c:4a:6d:ee:b6:d5:10:be:
2b:ba:9e:36:0d:8e:f1:f5:fd:76:ce:f6:02:c2:2b:81:31:d1:
e1:0d:e1:18:c2:af:3f:18:3f:0f:4a:33:ab:2c:28:06:17:30:
b3:ed:79:a0:90:dc:1e:b1:f2:82:99:af:5b:b5:e4:21:59:53:
d0:c3:51:4f:e2:67:ed:b3:fd:60:04:0d:f3:f9:ab:c0:fd:cd:
4c:04:25:0d:e5:8f:fa:6f:29:ec:d1:95:98:9a:3b:32:98:a5:
a2:45:40:4b:cd:8f:b3:3a:22:b8:37:5f:14:52:c3:77:24:ee:
6f:c6:42:7b:f6:d7:5c:22:86:f6:76:55:ec:54:41:cd:43:dd:
86:ac:4b:b9:64:ea:d9:23:76:c3:04:d6:71:76:91:10:0a:28:
8b:a5:ee:a3:07:e6:b5:24:3a:b3:ee:a2:9c:f6:10:13:23:6a:
48:c0:1c:c2:88:ef:0e:c7:77:eb:b8:e9:d6:ef:ed:0b:06:b7:
e7:9b:58:9e:1a:60:ba:11:78:b2:58:54:ce:0c:97:46:fc:6d:
b6:f3:38:ef:98:37:ea:be:a8:47:da:57:09:cd:d4:5d:6c:7c:
8f:5e:97:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:49:00 2025 by rpki-client