Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_u-XLlu2tt8FUhC0sD8HdImK7LM.cer
File: _u-XLlu2tt8FUhC0sD8HdImK7LM.cer (raw, json)
Hash identifier: 9nSCfY+hQ0/5+pmrFC8A7vT/5xlNgzfUHkKlq7FzlDI=
Subject key identifier: FE:EF:97:2E:5B:B6:B6:DF:05:52:10:B4:B0:3F:07:74:89:8A:EC:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F4CD6AC3B8C20ADF2C4290E6A3A00
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/_u-XLlu2tt8FUhC0sD8HdImK7LM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.236.231.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:4c:d6:ac:3b:8c:20:ad:f2:c4:29:0e:6a:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=feef972e5bb6b6df055210b4b03f0774898aecb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:1a:25:45:03:a8:3d:a4:ac:14:ec:af:32:
80:b1:65:90:2f:e2:4e:26:1c:52:cf:b2:bc:1f:2f:
c3:92:36:15:b5:06:9b:91:53:5a:42:f7:e8:cf:4b:
b0:ee:89:fc:5f:2d:76:d8:c4:df:5a:ae:64:0c:40:
32:98:d6:76:a0:18:37:c1:5e:a1:13:e1:4c:95:6f:
65:b6:c0:4f:5c:8c:77:ba:b1:50:26:00:5b:eb:4d:
2a:14:d1:bb:5f:86:15:58:91:ff:bf:31:27:b9:07:
b5:75:ea:bc:34:90:58:aa:82:f8:32:82:7d:f8:98:
1b:d1:2c:b2:aa:2a:03:92:58:50:0d:bc:7e:69:e7:
de:cd:16:0d:71:e8:b8:a8:e6:a2:2f:de:34:0f:85:
2e:83:70:46:53:8b:04:31:c6:72:91:4a:38:0c:c0:
db:bb:2a:75:1d:a7:f7:3f:a5:6f:53:71:91:5c:07:
42:94:46:3f:13:70:34:1d:18:d2:03:11:99:7e:80:
60:23:ce:64:9b:22:fe:be:4c:e8:0b:c3:98:b7:16:
13:39:53:bb:87:f5:95:fd:74:e0:67:8e:57:4a:96:
36:c3:5f:34:28:da:df:8b:df:d2:9a:98:b9:71:d2:
f9:a8:f9:c8:cc:5f:74:9c:ce:71:9e:4c:80:fc:8a:
05:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EF:97:2E:5B:B6:B6:DF:05:52:10:B4:B0:3F:07:74:89:8A:EC:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/_u-XLlu2tt8FUhC0sD8HdImK7LM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:af:b2:df:0a:b7:5e:b6:0a:d9:f6:a5:0e:87:3f:ba:43:8f:
de:b7:ed:06:96:87:48:59:04:8b:0e:00:49:bb:3a:ac:d0:e0:
ae:02:95:80:81:85:67:5a:f5:65:9b:f2:9b:bc:9e:37:3c:6c:
20:30:78:45:ad:39:95:92:0a:22:c6:83:77:e9:0c:08:48:ad:
ba:96:ec:63:16:dc:ef:85:b4:43:9b:da:90:ee:0f:6f:86:73:
53:81:20:e1:8e:1d:41:39:86:f7:6f:e0:0c:54:2d:5c:99:97:
6e:b9:c2:e3:09:fd:e6:b0:dc:11:e1:85:98:6c:0f:bf:75:79:
98:12:ee:13:a6:d8:08:6e:a2:0f:5c:80:c1:d9:e4:7e:1a:e8:
e1:23:08:10:86:5f:53:5f:d1:e9:16:54:e8:2c:24:f5:d4:15:
ee:64:9a:ec:6d:c5:cf:ca:d0:0f:4f:67:15:09:f7:c7:b6:46:
88:96:a5:cc:5d:c0:88:03:ca:88:18:7d:58:bc:9a:25:65:a7:
30:ec:9f:b5:27:52:7e:33:91:6c:16:d3:11:79:ff:4e:fb:19:
f9:92:cf:d2:a2:a8:ef:c7:29:e5:10:20:fd:19:3a:61:c6:4b:
ff:98:ac:be:84:53:61:dc:21:15:1e:d1:82:bc:24:e8:91:8d:
25:2a:ac:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:44:42 2025 by rpki-client