Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U-MsX4lfsS5tZ04LFvbu5eUSZF0.cer
File: U-MsX4lfsS5tZ04LFvbu5eUSZF0.cer (raw, json)
Hash identifier: KDB36YaQOQI2uQ5Jr+viJm1W5lbfISc27z4yqnFmgB8=
Subject key identifier: 53:E3:2C:5F:89:5F:B1:2E:6D:67:4E:0B:16:F6:EE:E5:E5:12:64:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F6413F6F642ACA0F586A708ADA19C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a0e:9b80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:64:13:f6:f6:42:ac:a0:f5:86:a7:08:ad:a1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53e32c5f895fb12e6d674e0b16f6eee5e512645d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:06:13:26:22:78:17:ac:12:cb:53:ca:fc:51:
f3:f2:f1:60:d4:e5:d8:37:6e:fa:f4:67:0c:b8:6f:
11:f2:37:50:75:64:bf:ac:ed:38:26:3e:0f:8a:0a:
2f:db:9f:ce:9d:e9:b1:de:f5:62:1d:bb:88:bd:5f:
7f:ec:9d:35:b8:cc:1f:bb:4e:a4:2d:7b:c9:fc:d3:
92:79:9f:31:54:03:9b:16:a1:65:9d:33:fe:7a:a0:
af:2d:66:1d:89:66:a0:3c:2b:e7:6c:55:00:c1:36:
b5:27:3a:da:b6:53:ec:86:dd:a6:b5:32:56:1d:e9:
57:1c:c5:be:43:65:54:53:b5:3b:34:59:56:06:93:
38:d3:9d:f1:28:3b:f1:d5:c5:5e:92:9d:bd:f4:93:
ea:b1:12:a0:20:94:0b:c2:f4:3f:f9:68:aa:52:cc:
ed:0a:52:95:17:b2:f3:83:91:6d:84:2c:cb:a6:a3:
d5:5e:51:44:e3:8b:a4:86:2e:fc:42:64:4f:7c:0a:
5e:a3:08:f6:5d:35:d8:cd:ac:d7:56:6c:6c:9f:e1:
4b:8c:78:67:88:fb:11:c0:45:40:8f:fc:12:72:77:
1c:f3:f4:61:c5:41:a1:03:25:57:48:20:c1:70:88:
91:c6:b4:af:b4:a7:c0:86:8d:18:c8:0f:22:1d:c9:
2a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E3:2C:5F:89:5F:B1:2E:6D:67:4E:0B:16:F6:EE:E5:E5:12:64:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:9b80::/29
Signature Algorithm: sha256WithRSAEncryption
6c:4c:78:e2:f6:2c:f0:2e:46:56:63:68:24:c6:21:12:c1:e5:
00:1e:77:e5:19:9e:4b:ea:ea:fe:8b:21:59:ee:39:5d:13:c9:
dd:6d:e7:ee:90:6e:76:f8:12:88:58:f7:c5:1b:db:29:43:7b:
df:22:2a:ec:be:b7:cd:c9:0d:18:fe:c1:a4:a5:c4:61:82:16:
7f:d1:50:9e:23:f0:6b:66:15:38:21:03:dc:df:73:9a:33:d1:
64:92:79:bd:16:f6:1c:15:4d:ff:a1:ff:7c:4f:65:c2:8d:d5:
8d:60:39:8d:f2:c2:74:c0:63:63:d4:e1:2c:3c:23:f1:34:10:
5b:b1:2e:72:0f:45:5e:f6:c6:08:be:77:0a:82:cc:74:de:a9:
0c:e7:3f:61:da:2a:8d:c7:82:7b:32:18:66:0e:0d:ab:fb:73:
4b:4f:a1:b1:56:25:24:8b:69:1f:6d:43:6c:c7:16:e8:55:db:
df:8e:2b:5a:4a:3d:76:e8:8d:99:3d:fb:2a:1d:79:c4:52:29:
1f:0d:dd:d2:64:b4:b0:4f:c5:91:44:a7:37:f1:ec:e3:a7:46:
33:b0:fd:b7:24:ca:47:3f:9c:10:63:b5:63:90:ac:ac:42:f8:
09:50:1f:05:70:9e:1d:05:91:72:d4:c7:da:15:aa:26:ae:61:
13:4b:35:c7
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZQiH2QT9vZCrKD1hqcIraGcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2UzMmM1Zjg5NWZiMTJlNmQ2NzRlMGIxNmY2ZWVlNWU1MTI2NDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygYTJiJ4F6wSy1PK/FHz8vFg1OXY
N2769GcMuG8R8jdQdWS/rO04Jj4Pigov25/Onemx3vViHbuIvV9/7J01uMwfu06k
LXvJ/NOSeZ8xVAObFqFlnTP+eqCvLWYdiWagPCvnbFUAwTa1JzratlPsht2mtTJW
HelXHMW+Q2VUU7U7NFlWBpM4053xKDvx1cVekp299JPqsRKgIJQLwvQ/+WiqUszt
ClKVF7Lzg5FthCzLpqPVXlFE44ukhi78QmRPfApeowj2XTXYzazXVmxsn+FLjHhn
iPsRwEVAj/wScncc8/RhxUGhAyVXSCDBcIiRxrSvtKfAho0YyA8iHckqMwIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFFPjLF+JX7EubWdOCxb27uXlEmRdMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzg2NWYw
OC00NjMzLTRlZGMtYmM4ZC0zMDg0Zjc2N2MyYjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvODY1ZjA4
LTQ2MzMtNGVkYy1iYzhkLTMwODRmNzY3YzJiNi8xL1UtTXNYNGxmc1M1dFowNExG
dmJ1NWVVU1pGMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKg6bgDANBgkqhkiG9w0BAQsFAAOCAQEAbEx4
4vYs8C5GVmNoJMYhEsHlAB535RmeS+rq/oshWe45XRPJ3W3n7pBudvgSiFj3xRvb
KUN73yIq7L63zckNGP7BpKXEYYIWf9FQniPwa2YVOCED3N9zmjPRZJJ5vRb2HBVN
/6H/fE9lwo3VjWA5jfLCdMBjY9ThLDwj8TQQW7Eucg9FXvbGCL53CoLMdN6pDOc/
YdoqjceCezIYZg4Nq/tzS0+hsVYlJItpH21DbMcW6FXb344rWko9duiNmT37Kh15
xFIpHw3d0mS0sE/FkUSnN/Hs46dGM7D9tyTKRz+cEGO1Y5CsrEL4CVAfBXCeHQWR
ctTH2hWqJq5hE0s1xw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:20 2025 by rpki-client