Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
File: brYQV7gmVB0hbNWVz4bGoG-yrhE.cer (raw, json)
Hash identifier: UaN17CeSisR5ejaZXve7+CayJL31eF/vgVw5ikH7G+g=
Subject key identifier: 6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D8D08755532B766D56E08DBBC01763
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:48:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 192.146.242.0/24
IP: 192.160.156.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:d0:87:55:53:2b:76:6d:56:e0:8d:bb:c0:17:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:66:26:77:a0:2b:87:8b:08:cf:a3:55:1e:
29:4d:40:a2:b0:0b:60:64:3f:d2:bc:ff:85:d4:3d:
77:60:33:3a:6e:39:6e:9f:0b:d8:16:9f:ca:95:25:
89:0e:a7:7a:38:65:28:a4:b4:64:77:88:b7:57:14:
ee:90:f3:27:e8:a4:83:cc:ca:e4:1b:5f:72:6c:e5:
96:06:88:d8:2c:fa:57:35:e7:33:ee:d0:5a:9f:a4:
bc:ac:e7:02:3a:5a:65:db:e2:08:9b:d9:de:8a:33:
49:2b:88:62:e9:3a:5a:ad:0a:fb:e1:cb:ff:7d:e7:
1e:7e:35:e0:d2:71:07:be:c3:00:d3:e0:4e:09:2a:
c1:4d:a1:df:15:3c:9b:9e:b7:82:99:7f:ba:e9:c0:
a6:1a:ac:a7:60:69:c3:15:27:26:47:05:bf:bf:ad:
ff:aa:4b:a2:41:c7:59:fd:8b:5b:9e:4e:1f:39:f0:
6e:cf:c0:b7:87:22:37:78:8f:67:85:55:88:bd:55:
3e:b8:c5:84:6b:85:eb:de:d8:7e:c0:fb:0d:d5:20:
ea:5a:f9:64:30:52:4e:cc:6d:08:e0:06:47:cd:9d:
ed:be:ad:82:87:0a:73:4d:bd:e4:7d:66:92:7f:23:
f9:a2:96:ae:78:b3:97:fa:aa:eb:2c:69:00:c9:cc:
7b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.146.242.0/24
192.160.156.0/24
Signature Algorithm: sha256WithRSAEncryption
95:84:1d:32:18:40:cb:75:ef:da:50:f2:3d:3f:8d:cd:32:64:
04:df:7e:af:d7:ae:e5:a7:c5:3c:18:70:46:a0:40:1b:35:41:
3c:71:df:25:cc:69:e6:31:fc:a5:ac:aa:4f:28:52:e9:7e:10:
24:98:cb:4b:79:42:fa:e4:42:45:81:49:ea:9c:8c:fc:0e:7a:
cf:1e:94:56:60:9b:61:0e:13:ac:e1:6d:9c:de:ef:bd:15:31:
bf:b9:0c:8c:52:8c:75:5c:bf:55:95:ce:0c:bb:3e:59:76:b5:
a6:19:4f:d4:52:a1:d0:a7:05:04:16:6d:cf:d1:b4:94:cd:45:
89:8c:b4:0b:48:ff:35:b8:14:a9:bd:dd:96:dc:5d:e4:f0:11:
17:f4:ae:f5:24:ab:ff:84:e6:9d:d6:3f:f2:bd:56:41:2a:95:
8d:b9:bb:79:96:a0:a1:5f:ac:7f:e5:fe:39:0c:47:89:86:54:
1b:da:07:d6:5f:c5:be:13:06:18:dc:c2:41:2f:e6:8a:2f:a1:
bd:46:00:bd:21:45:eb:d9:a0:a9:c6:62:0d:f6:60:67:6c:f3:
2a:55:96:f2:6f:d7:dc:0e:60:4d:d8:87:9e:94:3b:8c:92:ea:
5a:ab:94:c4:7a:41:f9:8f:bb:ad:c3:89:2f:5b:10:28:d9:52:
f7:e9:05:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:45:18 2025 by rpki-client