Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
File: ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer (raw, json)
Hash identifier: P4Lg+dDnFmrZJIqNz9suTQDd5o0LhtAkAWlsK6NxBy4=
Subject key identifier: 64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC3C438BA7D482D9AFE632916E05AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.126.96.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3c:43:8b:a7:d4:82:d9:af:e6:32:91:6e:05:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64d7f7e174179a133e30c660edfa86e74a40dd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:00:a8:91:51:54:8b:93:4e:11:fb:9b:23:26:
0f:7a:18:83:2f:b9:05:28:3e:0f:8b:89:69:3b:fb:
52:c8:3e:50:e5:45:41:c5:e2:34:ec:cf:2a:fd:c3:
7a:e0:4f:3f:c6:4a:9b:11:ff:da:06:8d:3e:34:f7:
58:ee:3b:be:c4:0a:12:54:e0:3f:da:4a:f1:2b:fc:
f3:97:e6:9e:52:7e:16:e5:6b:24:e8:70:c1:d7:64:
2f:cb:9b:bf:ad:67:36:d3:fa:3c:78:8a:6a:7e:72:
70:f2:e1:83:3d:1d:f9:1f:2d:60:2b:f4:d7:1a:05:
c6:83:7d:8b:87:7e:3e:11:62:0c:e6:89:28:7d:07:
9b:a5:d3:35:e6:64:37:13:6a:b4:0c:1d:50:45:ff:
4c:aa:19:5e:82:bd:6e:7c:c0:c7:1c:ec:d7:c3:80:
f0:47:f9:f4:e3:22:b6:0e:cd:50:1d:a9:80:02:a2:
05:b0:45:1c:d2:8a:8c:68:34:01:17:c3:5f:58:2c:
e0:6c:14:2b:19:43:07:d4:f5:a3:b1:1f:62:b6:43:
b4:35:7b:a6:4a:25:73:71:83:9a:f9:c8:22:03:d3:
7f:b7:9b:05:0c:8c:79:9e:ae:c6:c2:06:b8:51:cd:
f6:cd:c9:9b:67:b6:a0:32:ea:e0:39:6a:e6:30:e8:
ff:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.96.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:5e:38:1d:83:bc:e5:6f:b8:e0:35:b4:0c:c0:23:c1:a3:ad:
ec:90:99:a8:c6:8a:cc:8b:e3:1a:b3:b4:a9:3e:c9:2e:76:63:
e7:9b:b6:ae:97:10:73:1c:23:fa:50:1b:77:fa:1d:a4:aa:7a:
0b:e9:87:19:dc:11:2f:9f:c3:d3:66:d3:2c:8f:a7:c0:8c:b8:
77:98:c4:b9:d1:75:d5:62:9f:51:19:03:04:f5:c4:df:c5:49:
b0:11:df:09:89:e4:da:42:ff:ef:69:93:a8:c5:34:ec:b2:05:
2b:d1:54:90:68:6a:fc:3e:38:c0:14:8c:f7:45:b5:aa:43:e4:
67:f0:99:31:03:c9:34:44:32:45:e4:9b:36:ed:5f:cf:bb:5d:
d7:64:a6:33:be:63:4e:57:2b:cd:27:ba:bd:96:14:64:c5:56:
ef:97:d3:e5:16:bb:e1:49:6b:71:db:fd:97:34:2a:70:f2:e3:
df:69:00:be:72:cf:79:7f:e0:f9:6a:16:33:53:a4:aa:47:f7:
93:9a:1e:1e:cc:8f:d9:1c:d0:d7:87:f4:b9:24:bb:ad:9a:bc:
6f:ba:5f:4f:05:f1:d0:e6:eb:13:95:7f:c7:23:ee:e1:86:f5:
2d:16:aa:b1:0e:d7:33:1f:3e:10:2e:58:f6:92:aa:54:23:34:
cd:ad:e7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:02:42 2025 by rpki-client