Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
File: bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer (raw, json)
Hash identifier: f8mDD34qAZl22DK+WYnUwgXNgbfg4LCqW5kc527L+Qc=
Subject key identifier: 6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C7A7B30789A7BF575AD235EC5AE65
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 141.72.0.0/16
IP: 192.124.244.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7a:7b:30:78:9a:7b:f5:75:ad:23:5e:c5:ae:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6eae4bb0513980c87f9bac592952c095777ac12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:ba:87:e4:9c:87:0e:f8:64:95:2c:d8:99:
07:37:dc:7a:f2:10:92:6a:bb:6a:fb:79:33:7a:07:
74:93:7d:a0:25:65:83:47:bf:62:ba:54:40:fb:0c:
24:0f:40:14:c9:45:29:0f:0d:e6:d9:b1:3e:a9:d9:
68:6c:8e:31:61:74:45:7d:26:35:94:69:a4:b7:9a:
a3:01:07:fc:76:6c:d1:db:3f:57:eb:c1:69:45:a5:
f5:1a:6e:89:99:80:e2:49:99:b5:53:ed:f7:36:1b:
41:e8:d3:75:5e:4b:d6:13:9b:27:cf:c8:05:d1:66:
e5:84:13:2d:05:80:35:8e:0b:49:6a:05:d0:11:a5:
42:28:56:b6:1f:0f:56:74:66:5d:a1:c2:2f:c1:99:
75:23:db:da:da:0c:d8:94:d5:56:0c:dd:a8:18:39:
9b:6c:ce:93:35:cc:d3:c7:ac:21:70:f8:c3:5b:91:
4b:70:4e:7b:60:1f:f4:1b:67:a2:a8:c5:bc:a2:72:
26:c4:a7:4b:bc:cb:bd:be:d3:75:e0:d1:bf:9f:5d:
d1:a9:46:a2:70:21:82:5d:3a:5e:bf:a5:7c:72:ae:
5d:93:4d:9a:dd:0c:06:6d:79:b0:66:1a:87:31:9e:
e7:72:c3:2d:67:93:7e:1b:03:15:9b:02:f7:b4:2f:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.72.0.0/16
192.124.244.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b9:ea:7c:3f:8a:67:6a:c2:eb:cc:be:a8:44:cd:fb:20:c9:
6b:a7:2d:58:8e:b9:fc:22:58:22:1a:43:48:95:71:04:e1:d1:
01:41:0d:e1:b0:07:46:e5:c3:5e:6c:b3:03:6c:e0:4e:39:0c:
6d:05:a8:15:34:59:20:ad:b2:47:84:67:ac:8b:a4:40:9f:32:
30:23:9c:7d:14:dd:71:ba:b3:00:3b:85:61:25:b9:3c:12:9a:
db:85:ea:7b:84:34:4e:ba:63:ef:a1:4c:82:75:30:a9:f6:8b:
31:1b:ec:77:9f:c5:9b:8c:d6:d7:21:95:c3:05:53:8d:b1:d7:
fa:d0:68:af:b6:57:53:94:64:4c:42:96:90:9b:64:10:c4:48:
ad:aa:a1:e6:19:70:86:18:c7:3b:7a:8d:80:87:df:ed:60:c1:
88:03:df:bf:aa:b2:cc:02:17:09:85:f7:7e:74:82:b9:a4:d5:
b3:0c:4a:ee:2a:be:50:05:64:cd:ad:29:7a:80:6d:e8:32:16:
a7:54:ec:15:db:11:d9:ff:1c:e6:c3:fa:de:08:a7:16:36:ef:
2b:de:be:56:f9:d1:00:8b:ee:d8:8f:08:8b:f7:0d:6c:3d:f9:
7d:66:f3:06:5e:a0:0c:c4:96:d9:77:22:10:72:12:0f:22:0f:
26:7e:54:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:42 2025 by rpki-client