Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
File: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer (raw, json)
Hash identifier: ev8c6jZXx9uz733/c+K1bFgV8iC1t9yZLS28LZkjjTU=
Subject key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D77B6F54C45D3FC5A4B56CF1A71FCE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.149.75.0/24
IP: 2001:67c:29cc::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:7b:6f:54:c4:5d:3f:c5:a4:b5:6c:f1:a7:1f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ca:f0:bf:72:13:d1:8b:c9:c4:d0:bd:bd:77:
e8:30:94:44:cb:3d:78:80:64:e0:08:9a:9e:2c:69:
d3:26:ee:67:1e:59:91:d3:4c:e9:8b:0d:c1:da:55:
0a:79:16:a6:9a:d6:a5:7f:35:52:67:be:b8:77:20:
08:5b:b2:28:1d:07:7a:93:03:ad:4c:77:e5:2f:6a:
a1:11:11:c2:fd:ed:b6:65:07:1b:6b:87:f7:40:11:
52:06:96:af:f9:ef:22:38:71:c4:86:4d:ae:14:59:
26:ae:28:27:54:b3:50:9b:26:27:d7:d2:0a:b1:e0:
68:16:e1:b0:c0:b6:b6:47:98:20:e9:b8:8d:56:b1:
f0:86:19:ac:52:5b:d7:f4:3c:8d:b0:4b:57:f0:ef:
6b:1b:32:ed:91:5e:cb:24:94:fb:eb:0a:86:d5:93:
5b:8d:18:97:ea:76:92:3f:fa:b5:f2:e0:87:8b:81:
99:b9:ac:43:87:42:04:45:d5:34:45:31:16:44:02:
66:8d:87:6e:2f:7a:44:0a:ab:82:6e:9a:f6:e4:26:
f2:a8:7b:9b:39:2f:3c:3d:d9:7b:90:b0:d2:13:90:
65:26:c5:85:1e:02:f5:a6:7e:ff:12:c6:e3:48:f4:
8c:48:08:d7:3a:aa:4b:a9:55:83:ff:ac:a5:d3:6d:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.75.0/24
IPv6:
2001:67c:29cc::/48
Signature Algorithm: sha256WithRSAEncryption
6f:2b:a7:0b:80:0b:0d:66:07:cf:c4:46:6e:44:b7:36:15:43:
59:d0:93:1b:3a:63:c3:a6:77:75:a6:60:e3:06:db:d5:55:1b:
09:10:28:f7:9f:01:46:03:2e:25:54:7b:b9:22:69:7b:66:94:
37:c6:56:6b:39:21:7f:95:4c:d3:d7:9d:df:e1:df:bc:ad:a0:
ed:01:2e:6b:64:a1:c0:e2:1a:b2:21:99:2a:f7:ab:5a:07:92:
57:1f:ad:49:9e:f6:17:4d:7b:fd:40:13:3e:0c:38:88:82:96:
ed:6f:ed:7b:73:05:6a:06:82:ed:41:44:d8:96:e9:c1:32:30:
6c:ce:fa:ae:20:33:b6:eb:fe:50:f6:72:15:7c:43:3c:57:f1:
e3:6e:67:a8:98:89:77:a0:42:6a:c1:21:0f:27:eb:e1:f2:6d:
fd:76:52:e3:28:d6:52:c9:dc:c5:40:6c:55:e9:47:f6:83:8c:
8c:a9:1c:03:74:72:a8:59:22:e4:18:5a:7b:69:bb:6c:ad:26:
2d:8d:ff:75:02:89:b0:2c:1a:77:33:67:83:23:3e:e6:ac:09:
fa:37:69:77:eb:f4:c5:9d:83:14:32:fc:f4:b2:74:cd:b8:c9:
6c:d4:6a:2d:d8:27:bb:e7:bf:2a:2f:b9:56:c8:b3:50:1c:0a:
19:ba:72:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:51:55 2025 by rpki-client