Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
File: bx126IK_QQSbWtk9JaHdy6GSJ-4.cer (raw, json)
Hash identifier: h9ieLXH7fPWnY5fT0bo3iIBKmlCSprby+g7dxJb/sPU=
Subject key identifier: 6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C972936EE3EDEDA97D654F2C64343
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.108.4.0/22
IP: 2a06:47c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:97:29:36:ee:3e:de:da:97:d6:54:f2:c6:43:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c8:e9:47:26:71:ed:1e:c2:4f:4f:6a:a7:58:
d4:18:30:2a:79:e5:0a:c3:f4:ca:59:ae:8b:32:5d:
fc:54:27:25:87:7e:f0:2c:e0:f8:b9:73:9b:6e:7b:
86:e3:71:ba:41:58:fc:3c:39:67:1f:a5:19:58:ec:
3c:33:0c:8c:04:dd:c8:6d:3f:87:36:7b:e5:30:03:
07:75:1f:e8:a6:d2:e8:a3:50:d2:e8:4b:3f:67:5b:
3c:b9:16:9e:71:8b:6a:7f:8d:7e:af:a7:da:01:ba:
95:da:d1:11:25:a7:a1:1b:50:e7:72:39:a0:c2:4b:
74:70:d7:08:fb:ec:3b:f3:2a:e6:70:fc:bd:0b:5c:
cf:f4:53:cc:13:ac:a7:ac:c7:9e:d3:55:0b:f5:75:
c7:9d:ee:fa:65:72:f1:ae:58:a3:f7:3d:07:32:7f:
7d:7c:a6:0b:0d:f7:29:6b:97:4d:0f:07:49:27:ab:
0c:13:84:b6:93:57:6f:fd:81:a6:75:67:6b:31:33:
c7:37:cd:1c:22:b5:e9:b3:26:ca:c2:56:4b:53:b1:
28:30:ef:c1:4e:a2:20:ac:17:00:c5:b2:20:1d:82:
5b:e5:80:4a:97:a8:41:73:d0:40:a4:40:84:be:fb:
c6:cb:be:34:2d:36:ec:5a:9b:f3:5f:7c:2f:b1:79:
cc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.4.0/22
IPv6:
2a06:47c0::/29
Signature Algorithm: sha256WithRSAEncryption
30:ab:53:02:61:d0:a1:2a:13:d8:ad:29:b7:90:62:fd:89:63:
47:8e:6b:05:68:98:f1:21:89:ab:3a:55:a6:de:20:96:dd:1e:
34:b5:e9:2b:2d:e9:83:49:cd:50:83:ab:27:25:69:9b:63:59:
18:79:d8:74:3a:50:22:af:4f:8a:90:c0:6b:c0:38:e9:12:0e:
16:a4:b9:df:d6:bc:0c:14:7c:c4:22:93:e7:89:14:0b:91:27:
ce:19:3e:84:58:09:b4:80:44:b0:f0:be:a8:70:75:2b:ef:5f:
73:77:27:2a:b8:8a:df:51:a9:11:38:49:b2:c3:09:21:6d:14:
f9:5f:47:e3:a9:b9:f9:40:49:ac:7a:94:28:27:cb:9c:47:b2:
c8:37:93:88:c5:c5:9a:54:8b:10:c3:9b:e5:e0:87:e5:16:eb:
e7:b7:80:cf:fd:9b:2c:e0:02:4c:a1:7b:11:24:ec:73:8f:a9:
45:04:1b:94:f3:be:3b:55:ef:a9:ff:b0:ca:d3:0d:c9:a3:52:
e0:e4:4c:63:11:b4:b9:cb:45:9d:1c:56:aa:52:5e:43:56:94:
ff:b9:e4:ab:26:52:f9:d5:47:0a:a6:09:12:57:de:10:bb:e3:
15:5c:7f:48:47:93:31:ca:96:29:e2:3a:2c:4a:77:fc:70:77:
0a:06:47:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:51 2025 by rpki-client