Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UtLtjEn1Ab8ymRxkI8Ks768CSWk.cer
File: UtLtjEn1Ab8ymRxkI8Ks768CSWk.cer (raw, json)
Hash identifier: /gYsHNVAhERCADOiTu4UNBOWPnW4XhCdRDigvJ4mmC4=
Subject key identifier: 52:D2:ED:8C:49:F5:01:BF:32:99:1C:64:23:C2:AC:EF:AF:02:49:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA0FF09EA65EA0E12DE16B3AD2C3DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.102.87.0/24
IP: 2a12:8540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0f:f0:9e:a6:5e:a0:e1:2d:e1:6b:3a:d2:c3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52d2ed8c49f501bf32991c6423c2acefaf024969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:9d:38:c0:25:fc:2d:be:e6:bf:20:cf:ea:
d6:32:bc:19:5a:68:74:09:1e:6a:1a:5b:59:34:57:
49:ee:9c:2c:f3:93:78:d8:8d:8f:5f:b4:23:49:7b:
e9:40:5d:80:68:28:4b:b7:3f:8c:ff:2c:e7:71:7f:
fc:61:9b:58:3d:45:0a:3e:6b:61:71:67:81:6c:2f:
de:22:24:51:96:2e:04:f3:49:31:91:c1:3f:9b:8f:
24:08:09:ca:57:5e:44:30:aa:eb:ed:92:40:91:91:
a5:df:e2:28:ee:44:e3:fc:7c:75:94:36:18:70:48:
30:03:41:0f:25:3c:bf:ce:fa:91:f3:17:30:62:85:
f4:26:f1:f6:66:79:27:9e:d6:e3:64:34:f1:69:f7:
4a:89:d1:56:db:a5:37:b5:18:f2:94:6f:23:ff:6e:
89:77:65:ad:4b:29:0a:a4:7e:50:2e:f9:fb:cc:ad:
61:72:3c:91:c5:eb:6c:00:4c:a2:6a:8f:d0:ed:73:
04:48:6b:11:f8:eb:b1:2b:29:59:c0:0e:c6:d5:2a:
13:20:fe:e2:41:82:72:e0:f1:5d:38:08:ca:48:0b:
00:f3:59:39:94:26:c0:f1:6a:5e:27:c3:5f:78:59:
95:7a:45:05:6a:db:ec:1c:19:88:93:42:fb:3b:ff:
c7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D2:ED:8C:49:F5:01:BF:32:99:1C:64:23:C2:AC:EF:AF:02:49:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.87.0/24
IPv6:
2a12:8540::/29
Signature Algorithm: sha256WithRSAEncryption
93:e1:20:42:01:01:f1:b9:6f:38:58:6e:bd:f8:07:56:5b:7e:
1d:86:73:15:2b:72:e9:1e:9c:b3:54:2b:02:88:ca:ed:fd:69:
37:30:71:bd:7b:ae:d5:45:82:23:49:7c:04:55:85:b5:75:34:
f9:5c:72:0a:fb:39:60:fa:84:2b:77:89:1f:1e:f2:d9:9a:75:
d8:c1:52:93:a3:cf:3e:d4:6a:c6:65:86:44:d5:46:fd:f5:e8:
c7:15:a4:ec:8c:cb:83:0e:6f:49:b3:cb:7b:a1:a0:96:db:bc:
c8:68:84:a7:ec:6d:50:64:b0:4a:a3:90:d7:39:79:1f:08:67:
6a:9f:9c:ff:4f:0c:2c:7f:3a:23:57:e2:22:f2:18:dc:f9:89:
59:7e:fd:63:34:a2:16:ad:20:e5:2f:14:5d:8d:d8:00:b7:51:
70:04:13:f6:71:90:f9:ba:48:3a:7c:ca:74:4e:83:1d:57:0f:
e2:e3:67:54:3b:de:b5:3b:9b:af:e9:e2:af:08:f1:37:47:b0:
76:73:87:55:b0:d0:05:d6:38:5c:c3:40:cf:29:11:86:6c:ee:
81:fd:9d:6d:cb:bb:9b:7e:ea:ea:9d:12:8d:7f:53:a8:5f:9f:
d2:34:9b:03:50:c5:6a:ad:f1:6d:df:ff:bd:1e:23:1d:ad:ee:
4c:a6:d8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:47:36 2025 by rpki-client