Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
File: V5Sv215qGIV4CSClT_qCQI6oW6E.cer (raw, json)
Hash identifier: 1BgsM10wD+d+Um+9n1Ucd+VZztOynQFjn+pIVtrBrLE=
Subject key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3B93B78E94C1EF993CA973232D9B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 178.236.224.0/20
IP: 185.2.48.0/22
IP: 2a03:f900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jan 2025 05:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b9:3b:78:e9:4c:1e:f9:93:ca:97:32:32:d9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ec:f8:27:c5:46:66:96:4c:68:b7:af:a7:ba:
8b:7f:f4:9d:b4:38:63:a7:af:31:ca:9e:e3:52:16:
9c:f5:ed:d3:a5:7f:65:0f:58:fa:f4:e5:37:ab:d6:
5c:55:6c:63:f3:ab:a9:27:65:86:f7:b9:9a:2c:e0:
05:f2:64:79:57:ea:e0:27:90:8f:0e:6b:85:50:17:
3e:21:37:fd:9f:a1:bb:b9:45:d7:13:5f:2a:73:73:
6a:95:59:18:12:c6:99:82:3b:12:74:81:20:a9:eb:
15:05:f2:65:b1:56:25:0f:6e:3b:d4:06:04:c1:db:
7c:c0:2c:da:9e:9f:f2:11:ce:2c:f6:1f:e6:78:fe:
c0:4c:63:32:ce:c5:03:ab:58:2c:3d:41:33:79:c5:
19:ad:29:c5:3d:c7:0a:99:af:75:76:73:9a:6f:af:
ec:4e:aa:7b:00:60:34:92:4e:c7:63:e1:e0:de:a1:
72:f6:d8:ab:00:8f:c2:28:3d:34:d2:fa:59:19:06:
b7:c3:ba:5d:f6:80:ff:23:a0:52:05:f6:5f:a4:a5:
ea:10:a1:b8:22:34:04:b1:aa:9a:f9:93:dd:bb:24:
bb:63:3a:49:32:3e:58:03:ba:ee:8d:4e:91:98:e6:
4b:02:d6:57:70:51:51:dd:c1:21:44:30:cb:00:2c:
fa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.224.0/20
185.2.48.0/22
IPv6:
2a03:f900::/29
Signature Algorithm: sha256WithRSAEncryption
40:61:47:38:45:5c:27:84:e7:d2:37:1c:80:f4:39:ea:7b:ce:
65:34:76:65:b9:45:18:33:04:fd:c4:95:9d:28:58:7d:c6:a2:
73:a2:46:ee:16:57:58:bd:38:14:b8:03:be:ef:b4:5a:00:1f:
9b:7c:de:87:47:60:cd:26:23:f7:db:37:63:6a:cf:62:4e:36:
ce:4e:88:7f:49:3b:42:74:23:54:68:8c:80:05:fe:fc:a1:ff:
dd:ca:eb:b2:ac:00:0a:4a:72:65:de:d9:97:e9:e8:8b:87:0c:
b8:31:b9:94:ed:ce:38:87:05:0d:db:68:66:df:a2:78:4d:36:
3e:ed:10:20:11:7d:8f:50:82:b3:2f:72:8f:35:4f:3e:34:f2:
b0:e0:7f:4a:a7:40:0c:b0:be:8b:50:75:43:6b:b2:2e:2d:d3:
b9:75:af:a0:80:64:88:a0:77:ac:34:40:a6:af:7c:c7:4d:12:
98:f3:c3:08:96:72:e2:f4:29:c7:e0:a9:72:8b:bb:03:2c:4e:
ae:6e:fe:e6:4d:02:00:fa:56:b0:6a:b4:47:90:a0:02:87:36:
1f:37:b4:4f:b1:82:94:b5:5e:4f:a4:50:cb:68:70:82:d5:ca:
e5:8e:65:8f:fb:01:41:47:1b:e8:e2:6c:6d:74:e1:25:40:2d:
43:23:66:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 19 10:37:08 2025 by rpki-client on console-ams.rpki-client.org