Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
File: _jQJESdDd6icofnBXxgNqYbXRLc.cer (raw, json)
Hash identifier: 5nAR7aiBH2zAycx2Rnv8tMwSBs+ClCLDcfq6nxVTrHE=
Subject key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428238AA2833D70A216B3A514D72448E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:50:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:678:f84::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:8a:a2:83:3d:70:a2:16:b3:a5:14:d7:24:48:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe340911274377a89ca1f9c15f180da986d744b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e3:6b:68:0a:7f:24:61:2b:56:a2:ef:f8:c1:
a7:12:6a:8a:a3:3a:65:06:89:3c:b6:68:fb:b4:1a:
f4:f2:19:39:ae:d7:e5:ab:9b:dd:e6:5e:a4:bc:76:
55:ce:ac:71:69:b5:46:95:31:57:95:c0:ae:ee:3c:
25:ee:4f:b5:48:32:92:1c:0c:97:fc:68:83:fb:df:
d0:d5:f4:a9:e3:14:d0:ea:4c:4c:ce:c5:c9:c9:1f:
61:cb:35:53:ff:22:b9:a7:62:6e:59:ed:71:74:e8:
5f:1d:9f:71:13:47:28:a4:b7:63:74:90:cc:b7:c5:
f6:25:c6:69:84:9f:0f:07:88:c2:96:9c:b5:97:dd:
68:d0:66:45:55:6e:02:e0:6e:ab:3e:40:fd:ef:03:
f1:27:2f:a3:10:2a:a7:86:af:37:e1:db:29:70:81:
37:64:87:07:65:6f:64:1d:44:ec:78:33:e4:10:e4:
96:5a:cb:86:84:e4:ae:9f:01:5b:2f:11:4c:36:4e:
32:34:e4:cc:c1:60:23:55:2c:ba:24:5b:ed:4f:c4:
38:58:e0:0c:3b:62:b8:60:68:7f:c1:f1:86:e7:2e:
80:e4:b7:11:b0:c8:46:db:6b:5b:c1:a5:cf:ba:ee:
0e:03:41:de:3a:63:0c:70:b3:b6:9d:62:95:26:80:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f84::/48
Signature Algorithm: sha256WithRSAEncryption
36:91:29:41:44:0e:98:09:74:df:09:98:a2:1a:ea:04:a6:e7:
3a:9d:f2:f6:6f:57:c0:80:ce:d1:59:8e:06:39:fb:1b:ea:a1:
e6:7c:4c:ff:c1:1b:2b:d6:5d:28:f3:51:db:c0:c3:f0:f0:55:
0b:6a:49:90:50:3f:18:1b:95:92:85:df:a9:da:7f:53:8d:45:
5b:9c:ef:7d:9b:99:66:c2:50:4d:5f:6e:4a:38:4f:86:2b:db:
23:e2:e3:ce:87:63:13:44:c7:03:c1:2c:77:d1:6a:48:74:35:
bb:e5:4a:08:28:80:df:8e:b2:f2:ff:36:1f:5c:32:24:b6:55:
47:e9:21:28:81:69:18:83:5c:bc:bb:a3:58:f9:07:7d:85:e9:
8a:77:23:1f:dd:78:68:08:2f:33:9f:42:8d:06:2d:cd:15:1c:
c7:8a:4f:a3:05:bd:6d:9c:4b:eb:18:74:07:c0:9b:c9:dd:8a:
1e:61:db:58:ba:21:30:cf:77:9d:44:14:df:bf:37:fa:d8:3f:
67:6d:55:e8:1b:67:6e:61:30:85:fb:43:06:88:18:15:1e:9e:
00:f0:35:42:61:1c:97:4d:5f:30:35:38:33:2c:24:6f:8a:76:
7f:a0:38:73:68:27:70:4d:38:06:49:57:d3:9e:92:84:a7:00:
72:d8:77:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:03 2025 by rpki-client