Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
File: UIJpb7xB2QYWimDOCUlJAiz2Keg.cer (raw, json)
Hash identifier: Tp9rGwye8lcX5l494WZEUlezziRV4IkSeeSjlyZEkOs=
Subject key identifier: 50:82:69:6F:BC:41:D9:06:16:8A:60:CE:09:49:49:02:2C:F6:29:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3F69460697029E676F429D5FB1458
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:2ce4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f6:94:60:69:70:29:e6:76:f4:29:d5:fb:14:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5082696fbc41d906168a60ce094949022cf629e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:49:22:e7:39:66:2f:79:bc:da:ef:71:8c:
c2:e6:6c:fe:69:e1:63:b6:6f:e4:52:ae:3b:31:45:
7a:c7:85:4c:27:c0:d3:63:26:13:45:df:5c:3c:d5:
03:f2:40:b9:51:5a:db:a8:a4:21:b5:86:b2:13:9c:
14:e6:89:f3:1a:95:28:98:41:d6:b8:e4:56:63:93:
45:d4:53:2f:67:68:3c:e2:ef:ad:91:0f:a6:bb:69:
a6:59:ca:58:30:c9:41:54:5e:71:6d:4a:d1:79:df:
84:5e:a3:07:9a:d3:3a:06:b4:b0:32:c7:07:33:50:
8c:ab:51:46:af:65:ef:36:39:2a:66:05:39:af:2e:
32:18:11:06:2c:f2:49:3c:b6:e1:c5:c4:8a:97:ce:
f9:82:1a:19:3e:bc:61:14:d8:fa:46:4f:0f:b5:a4:
92:e0:75:b9:9f:2c:bc:53:5f:45:e9:b0:13:a7:ff:
ab:13:44:e8:f6:00:cc:36:4e:d0:bf:3f:af:93:31:
49:c1:12:5d:a1:25:18:12:99:81:1d:72:f4:d1:07:
ce:f9:1c:50:78:8d:d2:01:b5:7f:ce:14:fe:cf:e2:
ec:0e:a1:da:66:19:7c:b6:f7:ff:b7:a8:d2:6f:1e:
57:1e:83:63:07:e8:e6:d0:b2:1d:0b:80:2e:74:3f:
de:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:82:69:6F:BC:41:D9:06:16:8A:60:CE:09:49:49:02:2C:F6:29:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ce4::/48
Signature Algorithm: sha256WithRSAEncryption
1b:0c:e5:08:4e:b1:a6:32:10:73:7d:44:ec:ca:af:d8:01:0a:
94:3b:9a:fa:65:03:62:a7:1e:6d:a8:ce:e0:a1:0a:e8:7e:15:
ca:a8:a0:07:1e:ba:76:8a:16:7e:cc:4c:50:ff:60:88:bc:14:
d2:80:4e:a0:d8:ea:3d:e4:76:76:e1:c9:c7:dc:ac:d5:d0:26:
8a:bc:46:5c:9d:00:a4:d4:1a:7b:96:26:5e:f6:75:47:04:a2:
eb:f2:7c:b9:c6:91:9b:32:93:50:c7:da:0f:01:bc:4d:2c:58:
16:6e:df:54:1b:5a:5c:cd:24:57:c1:cc:90:5b:6c:a5:61:cd:
40:c3:61:08:66:2e:fe:da:a0:d4:c4:e4:99:1f:2c:98:6b:84:
8b:79:d5:e3:9b:78:cb:14:94:a1:11:4d:d8:f9:5c:75:b6:11:
e8:46:40:b1:87:90:33:4e:83:61:b7:1d:9a:d7:ba:b4:6e:33:
17:5f:ba:61:84:4f:c7:7f:ec:a8:89:07:5a:f7:32:e6:e5:34:
65:29:86:e7:79:df:8d:b3:af:02:d6:c4:d0:d9:55:58:79:2e:
38:ff:26:ab:94:a5:01:00:cf:81:85:91:da:42:49:d0:73:22:
4c:13:96:f2:47:4b:41:ec:7b:1b:ef:e5:dd:ff:cf:87:5e:51:
94:9f:da:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:47:41 2025 by rpki-client