Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
File: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer (raw, json)
Hash identifier: oHAaivaN8mUhkbH00gKVi+PkiuDSwA4mdNbMZc/0DVA=
Subject key identifier: 4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444CE5118A5D1EEC8D4042167B93AF0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 161.76.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ce:51:18:a5:d1:ee:c8:d4:04:21:67:b9:3a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:50:f8:be:11:66:ac:d1:70:d8:21:8c:ae:da:
4e:54:3a:69:d0:b3:00:ce:39:74:ad:64:6c:b0:d8:
96:a2:bf:a4:da:04:c6:b5:be:86:0a:a0:d7:ee:78:
e6:4a:dc:4c:9e:80:04:0a:4c:13:9c:26:c8:7c:3e:
eb:b1:2e:71:76:87:63:33:28:a3:69:d6:db:2c:2c:
2b:e7:f5:15:58:1f:5a:8d:2b:e8:9b:87:58:f8:0d:
11:00:d6:d0:05:85:b7:3f:57:4c:5f:34:b6:94:87:
16:a0:20:55:b6:6f:10:02:2d:d7:b9:67:bd:db:25:
90:ef:2d:9f:29:12:13:9b:68:f4:82:ac:3c:f7:8a:
be:d3:72:41:7e:70:7b:6f:03:32:1f:e7:2f:83:f7:
0f:05:d4:95:36:30:db:8d:12:b8:77:ab:1b:0c:86:
36:45:28:d8:27:e4:44:bf:f7:b0:03:24:4d:9f:60:
51:ba:4e:1d:58:96:bf:61:aa:21:57:2e:c8:80:43:
55:9a:5d:72:95:73:61:8b:18:5b:5a:0c:19:82:66:
ff:3d:50:e1:42:af:34:e9:60:d5:5d:bc:29:d5:3f:
8f:7a:b9:b6:be:fb:66:8e:69:b3:54:03:df:c9:23:
b8:92:ef:a8:5b:5a:68:cc:bf:21:22:ea:b2:8e:15:
3b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.76.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:fe:2c:ce:c1:e4:f4:6f:2f:3b:c5:93:73:34:e6:d2:e2:88:
94:92:02:28:51:3f:84:02:fa:20:08:14:dc:03:a9:51:b6:84:
fa:dc:f5:02:f0:3b:26:84:d8:c7:51:5b:22:97:33:64:f4:04:
7a:21:a9:c0:08:cf:bb:cb:43:a5:39:61:63:61:15:77:ab:06:
ea:bf:3b:a7:5c:37:28:fa:53:e5:ef:ac:ec:f7:d9:b3:62:0f:
c9:8f:b5:39:e1:df:53:28:bc:da:cb:1b:4c:0e:c3:c2:dd:8d:
0b:3a:47:ad:4b:28:f1:74:3d:da:3a:8a:ec:83:b1:42:1b:1f:
95:a0:b2:49:a9:ab:5a:bb:46:42:07:da:4d:b9:b9:1d:2f:f8:
05:d2:c1:9d:b4:d9:65:34:84:ad:57:b8:f4:4e:7f:51:63:34:
6d:1d:35:40:ca:9a:04:40:fd:22:ad:59:27:b8:65:f1:fe:c4:
57:aa:cc:69:7d:5b:73:e6:f9:b9:e5:11:81:9d:a9:76:8d:6a:
d7:d3:f8:55:d5:b3:80:7b:80:c6:46:43:19:e4:a2:fa:ac:61:
43:a3:7f:16:8b:16:f4:56:5a:c4:dc:e2:35:42:bb:7c:a6:bf:
d9:46:43:23:d1:98:87:e4:84:42:be:70:48:b5:2e:fa:fd:d7:
13:9e:2c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:05:15 2025 by rpki-client