Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
File: Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer (raw, json)
Hash identifier: CVS7Aa36E6v6BCeeSCCw94XsPkIC6mEUK65PHX7Fy+w=
Subject key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942368ED9D09454B118755CC3D861CE285
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 141.62.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:ed:9d:09:45:4b:11:87:55:cc:3d:86:1c:e2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ef:76:bb:9d:b9:04:38:07:fe:da:3e:31:5f:
b0:d3:0f:fa:66:6a:f7:67:2b:e7:38:a2:62:ad:f6:
23:2f:3f:5c:62:e7:2b:82:30:57:0c:9b:59:85:a6:
3c:e2:00:ea:ce:61:1f:35:66:b2:93:5f:10:d9:89:
83:4e:6d:db:49:49:37:99:c8:14:71:79:67:23:aa:
5c:01:4f:a9:7c:89:d5:79:df:61:1c:ee:3f:ed:fd:
60:5b:e9:35:9b:8c:fd:8f:ea:52:e7:38:ef:b5:67:
30:23:ea:9e:59:a5:9a:e9:8d:39:a7:3a:52:ba:41:
a0:f6:4c:70:33:e0:61:5d:46:ea:05:34:42:98:7a:
71:15:30:66:19:20:56:07:f2:3b:a4:4d:c7:fb:d5:
c8:96:3a:30:b7:d4:76:2b:a8:e1:0f:49:88:66:b9:
89:7d:7d:f3:13:f2:5f:00:93:4b:06:b0:63:08:7a:
e5:5c:51:29:66:3f:be:2d:7a:4a:a7:ba:64:84:bb:
89:bb:c6:0f:2c:3f:96:12:7f:bc:b5:ba:70:bc:84:
4d:0a:d6:ae:35:ce:e5:df:c3:2d:55:05:c7:3b:0c:
33:b5:28:4f:e8:33:ce:44:88:f2:eb:2c:c1:05:79:
7b:91:58:95:0f:39:97:0d:6c:04:36:f0:07:e2:64:
96:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.62.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:ec:d2:e3:04:f0:63:09:18:43:de:eb:d9:e1:7c:af:2b:28:
96:0c:98:9e:e0:41:ed:c3:b8:1c:42:84:03:cc:02:46:cb:ff:
b8:37:44:8b:a0:4c:4a:82:9d:78:ff:c9:c5:67:be:17:f0:27:
9a:ac:20:69:c8:d3:83:3d:25:60:03:b2:0d:a0:d1:20:a8:18:
07:3e:b0:69:25:f6:66:a9:e3:9a:d6:19:0b:3d:b9:e6:36:c5:
69:12:3b:6d:6e:08:ac:fe:dd:b3:b6:32:d1:46:5d:3a:68:ad:
08:49:b3:e0:40:aa:74:df:a1:c3:c2:39:60:fd:7f:5b:b9:54:
6e:7a:d8:e9:67:3b:cb:dd:89:88:2d:c3:1a:f1:e4:9a:92:f9:
d9:92:d6:be:7f:f0:bb:b6:21:8c:8a:d6:c9:3f:f7:70:2f:69:
d6:ae:0a:c8:f2:5d:f0:fa:67:a3:bc:2f:8d:f1:a9:b6:48:5e:
47:72:48:2d:54:8c:eb:e2:d3:16:59:6b:ba:60:f8:aa:d3:6a:
a9:f1:bb:d0:28:31:f7:6c:bc:34:7d:cb:a7:fb:f5:c1:cb:55:
e6:e2:14:ae:18:e6:b4:d3:65:56:27:a5:33:53:53:50:b5:26:
fe:7d:ea:1a:9f:eb:7c:c9:67:7e:7a:e4:d8:cf:35:2f:3b:58:
2a:de:b6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:39 2025 by rpki-client