Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
File: UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer (raw, json)
Hash identifier: mZyW1iUmz0OWWWc8WhwBsL8htruRH3mpW384FAT6aKM=
Subject key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206852075F855A5B3846FBADB0FE02C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 147.88.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:52:07:5f:85:5a:5b:38:46:fb:ad:b0:fe:02:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:ad:d3:64:15:ca:75:1d:d2:f8:e2:ea:d8:
93:83:67:3d:93:f1:03:6a:a0:91:c5:45:d2:54:b2:
88:50:c0:e7:8e:e5:04:cb:43:d3:5a:cc:57:d4:54:
92:1d:f2:b9:1b:25:92:d9:71:ea:64:6c:6f:61:6c:
85:1e:df:4c:bf:a2:32:b8:80:c1:75:a5:b7:6a:19:
51:0b:94:77:ce:27:68:45:a8:39:d4:11:67:41:2d:
73:15:29:a5:b7:f4:ae:5d:14:43:20:2d:77:5d:63:
f6:98:9c:31:05:23:75:15:b8:4e:da:25:34:11:17:
39:a5:56:6f:36:90:c9:1c:5a:ef:b4:c4:e4:c8:7c:
70:93:3b:ac:4c:49:0e:d6:82:14:f0:80:e8:75:3c:
3b:ec:96:8c:3e:23:56:b5:29:2f:69:00:1e:d8:56:
ef:d4:9b:f9:03:f5:54:87:0b:b2:0c:eb:5a:69:55:
f6:df:b4:6e:6e:5b:84:51:a0:ca:b0:41:ea:ac:ba:
61:d8:99:31:63:90:fd:88:eb:44:92:3a:85:9c:36:
98:a5:05:7b:31:e8:c6:e7:b2:50:ee:91:8a:6c:b0:
6e:01:ca:c3:32:14:89:84:90:e2:56:1c:88:29:cd:
a0:27:de:c5:70:54:78:3c:00:c9:94:b2:06:79:98:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.88.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:14:ab:3f:d9:be:1c:87:7e:a4:d4:eb:1b:4f:34:25:7f:30:
5e:69:7b:60:cb:a9:fa:4b:8d:cc:87:b5:f6:fc:c4:91:7f:f3:
be:ae:5e:21:68:c5:21:41:d6:7d:f0:cc:6b:88:c7:88:74:ff:
21:c0:85:b3:f1:4e:75:b1:41:fe:66:80:69:f5:4a:19:b5:fd:
81:6e:0b:16:c9:e7:e2:69:6c:07:34:f0:dc:1a:88:9f:43:92:
46:0c:7a:6d:57:6d:77:58:41:e0:4f:50:af:c3:f6:fb:cd:80:
b9:ea:11:1a:0a:41:c7:58:9a:d6:ce:94:6c:3d:cc:1b:35:2d:
06:7c:e7:d0:ac:84:27:4d:ed:4e:56:73:f8:ba:47:2f:72:dc:
a3:c3:fd:bf:c1:ea:6d:d5:b1:3f:8e:69:01:02:b5:66:f8:d9:
1a:86:48:8d:e1:fc:33:ee:c4:df:1d:9b:c2:4a:8e:14:04:41:
0b:22:d1:8e:0b:0b:0e:4e:cb:43:1b:6a:76:12:8e:b7:85:74:
fc:b9:09:a4:80:02:36:d3:1d:df:3a:dc:cc:e6:76:b6:05:2c:
ef:3d:97:8e:59:f3:c8:57:67:a1:80:c6:7b:69:65:b1:47:99:
4b:cc:ee:25:7f:c0:ed:70:67:20:44:e5:95:14:a1:bd:e1:13:
f1:17:6b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:38 2025 by rpki-client