Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
File: Zdxu-msTax5F4h5DToWaKS0uXhQ.cer (raw, json)
Hash identifier: a9ac5eeKk02Dpmp9ZHclq3SaZXM4jD4Pa/pOdje1bx4=
Subject key identifier: 65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F6F1F84166DD82F9DF7C560744FF7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.124.232.0/22
IP: 2a06:b600::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6f:1f:84:16:6d:d8:2f:9d:f7:c5:60:74:4f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:1b:aa:5d:76:79:d3:e0:5b:88:a5:3f:2f:
d1:dc:fd:f1:b8:f3:ac:b4:a3:41:a6:60:d5:b8:18:
aa:c0:db:7c:24:24:d6:b9:bb:2a:29:2b:7b:9d:e6:
7c:53:ec:56:6d:62:19:c6:d1:37:c7:13:7f:71:43:
76:e0:7a:9d:64:db:b1:da:47:67:85:af:ac:80:7e:
6e:57:3b:e0:21:f2:bc:90:cb:d4:0c:24:ec:66:36:
b8:d1:13:f2:7e:a8:35:bc:c1:1d:be:02:24:c0:37:
4b:d2:ca:8f:7b:b8:4e:59:49:a6:43:c8:d6:10:b1:
32:95:44:3f:c9:c4:5d:77:54:ec:16:ae:7a:97:da:
74:bc:05:bf:1e:7d:5e:a4:6f:5b:5a:c8:ad:f5:f1:
92:df:67:3b:92:a5:ea:c3:2f:5e:55:bb:2b:60:cd:
4a:cb:44:ab:87:61:6c:78:a3:f9:d2:af:e8:45:b1:
e2:87:3b:b9:90:31:0a:a3:e7:74:43:b4:64:7a:43:
4c:50:7a:ee:6e:b7:ff:72:7f:84:4a:18:c5:87:20:
3b:cd:bb:6d:14:e8:1d:54:41:a0:27:01:97:8f:45:
52:e9:b7:1b:54:6f:5c:74:52:72:8a:5e:ce:5a:38:
26:2c:86:c1:e4:06:ef:ad:7d:d7:34:4b:27:e2:fe:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.232.0/22
IPv6:
2a06:b600::/29
Signature Algorithm: sha256WithRSAEncryption
89:7e:54:f5:c3:51:b2:97:76:fb:fd:6a:59:4f:c3:5a:3d:95:
9e:6f:a0:98:c3:f3:c2:a0:ca:79:a6:df:d8:26:af:3e:e6:20:
86:5e:81:2c:f0:db:52:e9:c6:76:2f:20:9c:d7:b6:b4:41:25:
81:89:43:0a:e1:ce:9c:d9:27:76:13:da:30:ad:63:11:d6:d5:
f3:9e:08:dc:0c:04:bd:05:5e:ef:35:79:d5:5f:07:16:ee:31:
58:9a:60:fd:2f:23:f9:b8:07:39:87:58:bf:9f:84:35:72:35:
4e:c4:ab:5d:93:d2:da:fe:26:27:fb:49:d9:78:72:7a:96:c5:
ce:9f:8c:ca:5c:34:07:43:ca:93:c6:93:ff:ba:5f:22:a6:74:
cd:2c:f5:9c:6f:ee:4c:ae:37:b1:96:88:29:d6:21:ac:bd:86:
e1:3d:3d:bd:a4:1a:9c:fd:66:d8:25:72:31:8c:3c:d1:bf:5e:
8d:50:c3:1a:2f:72:2e:55:13:a8:95:f3:2f:59:54:f2:3d:71:
cd:25:31:03:73:12:35:85:2d:e3:9f:bd:62:c7:92:7f:6f:74:
10:a2:a0:33:51:56:43:db:bc:f8:f9:c1:d0:4d:81:13:3a:09:
78:ca:48:d3:44:60:a9:8c:6e:7f:45:95:a5:40:89:e9:49:dc:
0e:11:de:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:34:47 2025 by rpki-client