Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer
File: Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer (raw, json)
Hash identifier: n2y5Egz8KmQ0GVz6bLoQqqSY5Yl1s+XxwnQlcfgUS30=
Subject key identifier: 5E:A8:79:0A:08:C8:E0:D8:45:88:D9:4D:1A:51:BC:A9:AB:E7:58:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F01B3E646BABFE6EDA52BC4187F0E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a0c:c700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:01:b3:e6:46:ba:bf:e6:ed:a5:2b:c4:18:7f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ea8790a08c8e0d84588d94d1a51bca9abe7581d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:e6:0f:d6:e3:7f:b3:87:fc:e9:22:04:69:
33:3a:d0:c5:fb:ef:de:4c:49:8f:e8:70:73:82:46:
6e:0f:ae:df:fc:4b:95:ac:d3:e4:e6:82:02:d7:ec:
23:30:2b:e7:0d:64:a7:92:52:5a:6d:8b:b1:c3:92:
06:e3:b8:a0:e2:35:98:ea:64:b9:ff:08:c0:fc:47:
8e:a0:07:80:93:97:4a:ce:16:34:6f:dc:5b:8e:94:
20:9c:d0:39:0b:32:5d:89:02:53:2f:ca:ea:47:8e:
24:5e:2f:f0:b7:d0:17:c7:32:df:77:4c:10:85:f0:
ac:ab:aa:15:27:f7:c1:ac:80:3a:e0:04:5e:c7:ec:
c1:0c:51:3d:66:5e:44:ef:c3:c7:7b:f2:57:9c:8d:
50:78:b0:a6:38:2f:a1:52:4b:01:b9:e6:63:39:c2:
31:d9:48:32:b1:c6:52:79:70:90:7f:d5:c8:36:b7:
dc:00:46:12:63:34:86:e5:44:f8:dc:ea:f7:3a:aa:
e6:a0:2f:d0:0f:65:00:02:25:24:2b:dd:54:a0:55:
10:56:18:f8:6d:06:2f:18:69:40:7c:ba:78:44:33:
58:12:6f:29:61:a7:92:47:d0:d0:1c:84:7f:90:dc:
84:9e:78:c9:69:1f:1e:84:72:bd:e4:4b:08:c2:28:
7b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A8:79:0A:08:C8:E0:D8:45:88:D9:4D:1A:51:BC:A9:AB:E7:58:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:c700::/29
Signature Algorithm: sha256WithRSAEncryption
4d:c7:ed:a4:a9:99:29:cd:9b:96:c2:8d:5d:57:15:ac:32:bf:
0e:15:7a:f4:82:fa:02:94:8a:e4:f8:e0:03:05:7d:2a:05:76:
2a:21:e8:eb:a8:80:fe:44:f8:56:fc:29:20:15:4f:c1:31:80:
30:01:f8:de:fc:cf:d9:7e:2c:5c:83:e8:ff:fa:d6:49:15:b3:
46:b7:ac:31:be:76:53:9f:25:92:98:e9:bc:81:3f:7e:9b:23:
0f:9a:b7:48:ad:f8:b9:95:bc:f2:7a:a9:c8:32:ed:68:a4:f0:
79:ea:7f:05:9c:f3:aa:aa:26:db:7b:68:c8:bb:49:33:24:27:
b8:e4:f1:22:47:00:6d:5c:49:d1:2e:d4:3d:f9:e9:5c:8c:91:
af:a5:b8:52:62:f8:fe:b7:0d:b6:f9:ed:81:cd:f3:34:81:7b:
2a:57:a0:f1:34:a0:3a:a1:06:71:11:00:85:b7:05:01:3c:86:
ca:01:3b:5c:51:ba:c0:2a:95:18:15:eb:c4:8b:3f:40:3a:78:
a8:37:a2:51:92:64:42:f1:ea:2e:0b:fd:f5:ac:c8:94:b5:4f:
32:69:86:b8:f8:00:ce:d4:7c:a7:83:be:e2:2b:82:09:8f:39:
cf:e9:23:19:02:d7:53:05:a6:23:8a:e9:c1:2b:d2:4f:0f:ea:
c9:58:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:51:09 2025 by rpki-client