Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/clOCbDGl92CXvNwqL2UZiKE2flM.cer
File: clOCbDGl92CXvNwqL2UZiKE2flM.cer (raw, json)
Hash identifier: nlXtje2jE+1zhOlOSuRZoj4GMeni9/f5q0iMhhR+jf4=
Subject key identifier: 72:53:82:6C:31:A5:F7:60:97:BC:DC:2A:2F:65:19:88:A1:36:7E:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B23FB681EF75E9666F11452B8361F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.17.200.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3f:b6:81:ef:75:e9:66:6f:11:45:2b:83:61:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7253826c31a5f76097bcdc2a2f651988a1367e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:64:91:1a:34:83:f0:c0:ea:e5:41:3a:e0:cd:
94:a9:4e:28:69:49:09:7f:b7:98:9c:21:a5:f6:b2:
8a:56:c3:62:10:57:fa:cb:96:79:b4:85:34:da:fc:
e7:21:eb:64:75:5b:3c:24:78:31:d0:e2:85:fa:e0:
58:74:78:2c:50:ad:e7:c8:16:2c:49:0a:45:0f:20:
ea:ba:13:4f:98:2b:fa:16:21:9b:6c:db:41:19:a9:
e2:20:40:72:3d:2c:4c:12:de:e1:cf:15:76:ed:0b:
4a:15:7a:41:3f:0e:6b:ad:c6:07:95:1b:8e:96:c0:
26:7b:db:e5:28:c4:27:04:e8:4c:92:16:58:66:be:
46:a1:3c:cd:2f:6f:d3:b3:a9:54:3c:99:90:bf:b8:
a2:21:53:07:f0:57:ba:77:43:57:53:71:ec:d4:fc:
05:88:fd:28:b5:c7:73:a1:d4:96:44:8e:c7:e7:6e:
ab:75:80:dd:57:c6:02:3a:22:f8:58:b3:75:a6:1c:
a2:5a:bd:e9:5d:01:54:f6:cd:10:93:49:7b:e3:72:
07:e3:84:fc:3e:47:a5:2e:3f:a3:07:a3:fb:8a:64:
e3:c2:f5:96:42:46:3f:ef:14:cc:f9:d6:a1:e1:ec:
0c:6e:e3:38:58:0d:d4:94:66:a2:27:cf:84:74:98:
f1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:53:82:6C:31:A5:F7:60:97:BC:DC:2A:2F:65:19:88:A1:36:7E:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.200.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a1:35:e4:01:b3:d7:09:89:3d:3a:5e:ad:a5:78:0a:f7:fd:
bf:a6:05:27:65:f0:b2:ec:ce:2e:df:25:94:9c:79:99:61:7f:
40:39:31:72:12:4e:cb:a2:0d:89:71:fe:e0:ba:eb:cd:73:d1:
c1:51:f3:2f:37:0c:a7:e9:32:6e:e6:dc:29:8f:f2:07:a4:1c:
59:6b:56:d8:79:9f:12:06:6f:a4:3c:b1:3a:a3:28:8f:77:70:
d5:a9:13:60:6d:bd:1f:2e:7f:bc:65:27:d0:09:41:4d:3a:db:
ee:0a:87:00:e1:8a:2a:cc:97:93:1a:4e:5e:42:30:92:ec:42:
53:50:6b:8f:bf:3d:3e:80:e4:c7:48:cc:f9:45:80:3f:ba:05:
31:d9:9a:d3:3c:e6:0d:40:41:b4:0a:ee:88:88:f1:45:00:ef:
ec:16:19:f1:ec:0c:5b:49:1e:93:a1:e6:9d:22:bf:4b:1c:27:
ed:14:1e:db:2e:75:c1:a7:46:8c:e8:1e:83:06:0d:76:01:df:
b1:6b:c8:82:15:48:09:20:c4:65:2e:14:0d:ab:3f:4b:99:b9:
12:01:10:ec:65:f5:5c:08:a8:e7:f6:1a:09:44:48:30:7c:20:
e9:69:97:ae:9c:94:ad:f3:9c:16:a2:88:f1:1a:a9:24:4e:cd:
40:37:e4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:02 2025 by rpki-client