Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
File: _BeVJZEZ7optEI6bXL4LuQwJjs4.cer (raw, json)
Hash identifier: aW+fBEqeR2ppBEKkejg8+H+aPrl6REyqINcVsQBpQpE=
Subject key identifier: FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019484392078AD886D2F41595566F60EE0B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 20 Jan 2025 14:58:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.118.124.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:84:39:20:78:ad:88:6d:2f:41:59:55:66:f6:0e:e0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 20 14:58:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:21:2f:dc:f1:b4:fb:b5:10:d3:12:1f:32:
21:58:4d:9d:75:ce:6a:ad:c1:80:33:1c:5f:1c:eb:
21:27:53:8f:f8:38:14:c8:c7:e2:3e:d9:41:41:79:
89:09:a1:f8:a8:8b:4d:52:77:35:2a:0a:55:46:60:
87:a0:54:f6:a5:17:32:4c:7c:e4:6f:00:b3:a4:b0:
95:da:20:ea:f0:ec:0c:80:f0:02:f7:96:a3:74:0b:
bc:5e:81:76:4a:5e:26:78:87:41:b7:55:03:b5:d3:
b7:6c:29:0b:8d:7e:c8:2e:a1:df:5b:07:35:d5:80:
9c:df:e2:6b:ff:0e:e6:f8:6f:b2:0d:c1:55:24:d6:
bd:f6:05:ce:88:21:b2:34:4d:02:bd:b0:28:0c:c1:
fd:38:c0:7f:38:bf:0f:91:c9:0f:6f:59:78:27:66:
4c:61:1c:49:ff:60:d8:16:75:26:fa:86:7c:10:6c:
2d:b9:60:55:27:49:69:98:c4:85:d7:d3:20:7d:e9:
71:37:39:45:45:e9:a6:bd:31:c2:fc:88:8f:2b:59:
8b:86:69:2d:7b:14:40:b1:7f:ad:64:a7:3d:18:5b:
87:31:91:61:f2:e0:18:15:4e:4c:39:b7:c5:cc:ae:
66:cd:80:49:5e:17:51:43:00:49:46:7a:3b:f0:36:
df:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.124.0/24
Signature Algorithm: sha256WithRSAEncryption
15:56:b2:5e:06:ca:21:9c:fa:87:33:e9:23:34:3a:9a:d7:c4:
f5:b7:03:3e:90:24:51:cd:61:64:d4:1c:1f:2e:c0:1d:7d:40:
82:11:cb:bf:d4:d2:40:f8:1f:63:b6:57:c0:70:e3:4d:fc:2e:
eb:5d:f7:34:61:68:1d:f3:62:ad:ac:eb:23:fb:f6:d8:00:6b:
d3:4c:5d:c0:cb:58:8c:76:3f:0e:b7:9b:b2:55:b7:7c:b8:22:
d4:21:54:1c:7c:98:f6:39:62:0a:37:6a:09:ce:80:0e:19:6d:
e8:bc:d8:27:2e:01:e4:9b:b4:16:73:9f:bd:7b:61:37:2f:0c:
a4:80:da:22:1a:6c:7d:4a:ec:0d:76:73:0b:dc:8e:80:65:29:
5a:ac:98:56:2f:72:e8:6e:31:75:13:bb:c9:12:19:ab:6c:55:
19:39:f4:30:21:2c:5c:b1:a7:c7:25:39:e8:3d:bb:9b:26:eb:
b6:0c:46:9e:31:3b:80:b0:91:49:35:ce:24:aa:99:c7:fc:1f:
2c:f7:79:53:d9:73:cb:36:44:bd:4f:76:78:e8:f6:51:80:a3:
e1:ac:b1:1e:41:0b:05:2d:6e:1f:2c:d1:c2:75:d5:56:1f:c4:
2c:83:05:3c:e5:74:77:e4:c1:84:84:d4:3f:e4:4f:e3:76:e2:
14:8c:d1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:45:30 2025 by rpki-client