Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
File: c1AO60fC8TVxh2oZZjU3-LY2qA8.cer (raw, json)
Hash identifier: Y9eJidIc5gkU/Ewy2ZPS0XFTqqBIfMVnweMbf56q3N8=
Subject key identifier: 73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C836A2E1DFFD957F480583C0DA103
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 87.238.120.0/21
IP: 2a02:48e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:83:6a:2e:1d:ff:d9:57:f4:80:58:3c:0d:a1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73500eeb47c2f13571876a19663537f8b636a80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:45:23:29:19:57:15:ba:64:32:94:30:bb:86:
9a:68:3d:08:4e:9e:07:f0:44:2d:27:bb:33:22:27:
0f:8b:c6:6b:e2:35:ee:16:2f:90:d2:11:80:ec:30:
ee:65:35:8c:bb:80:78:c9:a9:a8:f3:db:b7:8c:03:
5b:c4:53:f0:a3:c9:41:e9:cf:71:39:30:44:f0:51:
7d:10:7b:17:f7:9e:6d:59:97:5f:27:ef:7b:af:74:
f0:66:d4:02:02:e0:ae:ee:c4:d0:4b:ec:76:ce:2d:
4a:cd:2e:36:37:df:20:f2:96:ff:80:73:b0:85:3a:
88:e5:ec:e8:79:6d:f4:c4:36:75:81:1f:79:fe:93:
be:14:08:16:c0:eb:82:37:c8:01:13:53:31:79:a5:
5a:9d:6d:33:14:73:df:5b:6d:4a:7a:2c:a6:6a:e2:
7d:01:c2:0a:75:a9:98:51:b3:9a:72:5e:b5:16:1f:
da:75:7f:a7:f0:5d:be:02:93:7c:b1:24:99:f1:52:
bb:18:54:1a:91:bf:66:b0:30:6c:2b:bf:93:dd:e6:
4c:e5:99:9b:11:12:24:83:f1:32:ae:49:90:3b:b0:
64:1b:eb:2a:8c:1e:bf:66:e6:86:c5:2f:f6:e7:1b:
5e:98:92:42:7e:08:8d:17:41:cc:a5:6a:65:ec:04:
9b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.120.0/21
IPv6:
2a02:48e0::/32
Signature Algorithm: sha256WithRSAEncryption
09:92:29:f9:f1:bb:06:18:a5:fa:b7:e4:73:22:90:e9:c2:26:
f6:69:84:52:56:d0:49:68:9c:b4:3e:90:49:4c:bf:fb:f0:c5:
8b:ba:a5:a9:a4:06:55:c1:36:39:da:01:63:19:02:5b:c8:47:
88:8d:06:c2:bb:b6:4e:f3:5e:da:97:4e:02:fd:22:b6:4c:e4:
d6:ee:6d:67:c4:c9:a7:99:0f:be:e4:cb:71:2f:0f:e0:70:05:
17:3a:8e:9f:f6:30:94:1d:84:7a:0b:a6:8c:07:5b:ab:62:78:
67:95:56:f7:d9:3b:15:85:14:a0:40:be:2d:a9:28:cd:56:bb:
50:99:85:3e:0a:27:f9:c4:e5:a0:ed:42:a0:a1:13:b2:8e:91:
42:da:b5:4f:0d:e8:3d:47:94:f4:c1:9d:e4:a7:24:87:24:4a:
ab:de:1f:5a:6a:db:5c:93:7e:e2:c6:4a:9d:f5:c9:51:aa:52:
0d:6e:0d:cc:a2:4c:22:0f:c6:91:fb:d3:8c:59:e4:ed:0f:08:
17:c7:05:38:6a:7e:ca:ca:9b:57:23:da:25:eb:96:0e:39:80:
47:3a:76:76:33:d2:d3:04:51:fd:1c:b1:a3:3f:d3:79:b6:85:
df:e3:9b:a2:02:d8:7d:b3:e4:f6:14:22:71:cd:f6:29:b7:85:
45:fb:8b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:42 2025 by rpki-client