Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZVFt3HMx4uJp3FfZx2MvJd59DG4.cer
File: ZVFt3HMx4uJp3FfZx2MvJd59DG4.cer (raw, json)
Hash identifier: czwBX9rlyDJWG80ce/26WUWh4ax2I0Yz8GeYg5qYdA0=
Subject key identifier: 65:51:6D:DC:73:31:E2:E2:69:DC:57:D9:C7:63:2F:25:DE:7D:0C:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5B831DE35382C1F88A33F5983B03B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207988
IP: 193.7.212.0/22
IP: 2a07:cc00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b8:31:de:35:38:2c:1f:88:a3:3f:59:83:b0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65516ddc7331e2e269dc57d9c7632f25de7d0c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c0:f3:6f:5c:81:0e:a3:90:8a:48:60:57:c0:
ea:87:86:ba:ec:62:98:54:07:ff:2a:3d:10:f9:6d:
3d:69:6b:59:3c:d6:1d:4c:58:db:4c:54:fc:1b:50:
18:7d:a8:5d:85:7d:b2:36:14:53:b5:78:fa:f1:4b:
a4:f0:2d:66:dd:86:02:a3:8d:34:72:a2:80:c2:b9:
83:7b:0d:0a:b6:10:61:23:66:a7:df:7c:08:ee:4d:
48:5f:2b:aa:8c:d1:e7:5c:1a:1c:86:da:c2:ba:72:
3b:3e:d0:0b:b4:83:34:29:6c:a1:0f:55:86:28:24:
a9:0f:df:d3:2c:1d:34:98:d5:c3:0a:1a:f4:09:9e:
c4:37:4a:af:b4:73:62:31:83:eb:67:9d:1c:c5:13:
56:dc:9a:36:c6:d4:4c:e6:27:3f:58:ed:02:c6:7c:
20:d0:b2:5d:39:50:34:4c:37:1b:f9:3a:59:6f:26:
30:4a:03:82:85:fd:73:10:a3:49:fb:53:ff:94:e1:
96:bc:d2:0f:9a:22:d7:bf:d4:eb:c3:60:7d:90:76:
96:da:38:7f:c8:5e:7f:df:f2:4e:5a:a5:fd:aa:57:
92:1d:61:87:62:97:d3:74:93:5f:2a:05:62:c9:4b:
e3:98:ac:72:1a:5f:2e:ef:bf:eb:97:f2:59:da:78:
82:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:51:6D:DC:73:31:E2:E2:69:DC:57:D9:C7:63:2F:25:DE:7D:0C:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.7.212.0/22
IPv6:
2a07:cc00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207988
Signature Algorithm: sha256WithRSAEncryption
24:79:ee:48:25:2d:ea:db:6f:f3:b5:77:7c:23:bb:f3:bc:d1:
63:b1:3c:9f:7c:20:93:a8:34:98:53:54:f8:94:86:d2:b5:f5:
fc:ec:84:0e:b6:8a:28:ec:f5:6e:17:16:39:89:c9:64:f6:c7:
18:41:4a:05:1a:02:2d:2e:d3:fc:c3:64:2a:da:70:14:e3:11:
0d:5f:77:ed:4d:43:38:96:3c:aa:87:47:e3:41:ec:9e:be:9c:
f0:30:98:81:2f:4a:bf:37:05:f2:18:da:99:99:4b:db:f6:54:
41:20:6a:44:c0:02:02:b1:32:a3:27:7b:b7:42:ce:60:d8:87:
9b:27:ea:b4:d0:06:83:bd:14:ed:3e:02:6b:db:27:da:1f:d3:
18:64:b6:b6:17:a6:da:aa:f9:6a:54:26:72:66:f3:71:da:f7:
2b:87:5b:b3:50:84:9e:f2:68:ab:60:da:7d:e1:75:a2:d3:f2:
33:f7:b6:9c:dd:12:96:bd:98:44:9e:2f:ef:10:62:6b:2c:f4:
e0:9d:22:82:b9:39:ef:00:47:9f:7b:0b:a1:55:c7:76:ed:27:
f8:74:25:d1:2e:fa:bd:5c:b8:d2:a7:d9:83:c0:32:3b:d9:53:
75:a6:76:45:24:5d:16:b6:70:ff:4c:f0:f1:ba:f8:4e:d1:55:
73:f9:35:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:34 2025 by rpki-client