Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
File: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer (raw, json)
Hash identifier: lEBoNUWz58Myk1Ti9RnANFTUODMVvDrjQXuKrNTjlgM=
Subject key identifier: 5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FAE7D53CE880B60D32F6B3AD5A1CCA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.91.12.0/22
IP: 2a0e:a40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:e7:d5:3c:e8:80:b6:0d:32:f6:b3:ad:5a:1c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:83:00:0e:5b:12:11:c6:d8:89:da:70:c0:
0d:d8:18:10:5c:0b:0a:2b:23:31:11:42:29:a5:97:
a8:6e:f9:c6:2f:8a:88:71:67:c6:93:74:f8:b7:2a:
6e:f3:be:b8:84:12:d6:cd:4a:e6:fe:36:c3:b4:9c:
c5:37:4d:72:48:d1:7e:fa:b7:14:73:f8:28:c7:c7:
7c:e3:61:4d:39:a8:c4:94:ce:b1:e1:b3:d0:ad:df:
65:cc:51:08:a3:38:48:39:64:55:4f:2f:2f:ce:76:
7a:cd:c0:5e:b6:97:b6:f5:b0:99:64:c0:9f:49:2c:
59:65:6b:4f:45:c5:71:e9:8f:bf:ee:05:77:17:86:
a4:8f:32:59:bf:2f:a4:73:a9:4c:f9:1c:4c:8a:d0:
97:44:c7:73:a4:b8:b6:58:0f:cd:26:2f:0e:df:99:
b8:b3:c3:89:16:90:9e:f9:ea:df:9a:65:d0:c2:11:
a3:05:b5:53:37:be:61:7f:ed:a8:06:e8:35:09:8a:
75:54:84:88:7b:e7:96:1b:4b:a4:e0:56:f1:57:6c:
fa:f8:38:1e:fd:c7:32:93:9b:9f:f8:60:a6:b2:f1:
be:6b:f9:cb:4c:fa:67:bc:e5:98:90:57:80:7e:8b:
e3:dd:6e:cf:9a:19:10:a8:30:b2:07:3e:26:06:2f:
94:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.12.0/22
IPv6:
2a0e:a40::/29
Signature Algorithm: sha256WithRSAEncryption
9c:ae:98:53:9b:8f:46:f6:2f:40:44:77:be:1a:58:8d:75:5a:
2d:a4:7a:ab:13:b0:93:8e:33:50:31:a8:fd:e8:1f:ff:94:51:
09:06:88:77:77:cd:95:0e:fb:2e:ba:89:0a:21:79:da:ae:79:
b1:68:99:93:2f:48:a0:b4:8b:17:97:0d:6c:80:1b:f1:20:ba:
5e:10:21:f2:50:b6:fc:ac:38:24:cd:16:4e:0d:e3:ab:43:69:
03:1a:94:21:19:94:39:d8:1f:ba:d0:3a:e2:38:e9:a6:45:bb:
1c:bd:79:6f:af:28:a1:42:4c:98:b2:53:a5:19:6a:b6:f3:e1:
b3:c7:0d:f1:1e:25:d4:84:c9:7b:40:c1:33:d6:7b:b4:26:fa:
85:91:d5:23:4e:b7:24:88:e5:bc:ce:26:6c:66:70:d9:c0:7e:
8c:ff:c8:d8:99:59:39:00:d5:5b:27:05:b2:14:15:26:3e:00:
f9:52:dd:f3:f4:60:2e:18:c9:b6:7b:9a:c1:13:c7:f7:94:2e:
f9:12:04:75:12:28:2e:5a:95:84:2c:b0:01:15:59:17:95:76:
03:2d:ce:0f:8d:14:bc:77:5c:88:39:18:4d:19:7b:d2:3d:51:
ff:b4:ed:27:ba:f8:77:cc:cd:62:74:b5:91:bf:81:27:55:65:
a4:e9:7d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:44:49 2025 by rpki-client