Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
File: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer (raw, json)
Hash identifier: UETzmgHk4uoVVpMcJ5QhyAPiOLn8C2JgvA3gBHBA1ic=
Subject key identifier: 74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067D9722EC6FA5440CEDE0C1A4F6249
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.111.14.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d9:72:2e:c6:fa:54:40:ce:de:0c:1a:4f:62:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74b083650295189f009aa74c12cbc61ee23fa753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:4f:b5:52:ea:07:3f:b0:a2:89:a2:60:3c:
8e:53:fc:fe:a5:ba:e9:6e:4f:72:2b:9b:a4:20:0e:
53:07:2c:bd:a3:e5:87:16:f1:79:d5:d1:c5:6d:7f:
d4:15:d5:72:7c:94:20:b0:27:45:b8:2e:ae:30:5f:
71:9a:bb:ed:5a:cc:f4:46:0c:41:c3:56:d4:f2:ca:
11:5f:8b:28:11:2c:03:56:75:39:65:e0:de:14:d4:
36:dc:6e:31:1b:be:d7:b3:56:cc:d3:18:ec:83:4c:
fb:26:9d:b0:d4:e1:6c:e7:c5:be:51:73:cc:22:13:
70:d5:9c:1e:b7:42:26:7c:b0:5c:71:cb:f1:fa:5e:
37:f6:06:10:c5:fb:2a:19:99:19:0e:c9:06:05:ba:
b6:4e:26:ee:d9:22:bb:99:5d:04:ee:cd:92:1c:49:
bf:83:a2:9d:ec:8f:4e:12:85:19:2d:0d:a5:64:54:
eb:8b:8f:a6:d6:28:c1:26:71:0f:55:cf:ec:18:98:
10:d9:b3:d0:b4:47:30:40:e8:94:af:92:54:22:81:
9b:74:ec:92:37:05:31:c1:25:8f:d7:99:99:f7:64:
3a:49:b5:fc:24:29:c9:0c:11:5d:bd:7a:d9:1b:9b:
44:a2:39:79:ae:90:83:80:ae:bd:c7:90:ef:e5:c3:
5b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.14.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:7d:e4:76:0d:9f:8e:c9:25:07:f3:2c:1e:8a:04:c6:95:e3:
44:8e:fe:86:03:75:7e:73:eb:24:2a:fb:45:4a:90:95:68:b3:
89:99:b1:de:f6:4c:01:75:a2:e4:b3:43:40:a5:c0:ad:10:d9:
dc:9f:f9:a0:b2:ad:91:53:ca:3e:40:7f:6d:b4:be:91:4e:5f:
ca:5f:24:32:52:b9:d7:ed:6a:02:eb:8e:f3:be:42:6b:b7:5d:
6d:b2:4a:14:99:9a:99:2a:7f:8d:2e:64:5c:7e:3d:bb:1b:7a:
5a:ff:f9:b3:f8:97:77:de:2f:e2:53:dd:3b:2b:7e:17:ba:38:
25:e0:da:8b:52:2a:50:df:4b:49:4a:a7:59:bd:43:b6:a0:c3:
2f:6f:73:66:82:a0:b1:1a:37:21:37:4a:45:d7:36:06:52:88:
5c:d4:66:5d:0f:8c:69:3e:a4:1b:f7:32:4b:7c:d7:dc:91:1d:
75:30:7a:59:9a:3b:44:1d:77:4b:1c:3f:80:33:9a:4e:30:07:
48:52:a5:c7:0b:f3:cb:ef:ff:c5:78:9a:82:3f:c0:25:8e:f6:
97:e3:a8:09:61:4d:53:0f:51:f4:8c:7e:c6:c3:ab:10:38:72:
7d:c2:6f:45:92:80:c2:57:f2:1d:41:31:b7:9e:69:22:e5:60:
09:4f:68:60
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQgZ9lyLsb6VEDO3gwaT2JJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGIwODM2NTAyOTUxODlmMDA5YWE3NGMxMmNiYzYxZWUyM2ZhNzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5pPtVLqBz+woomiYDyOU/z+pbrp
bk9yK5ukIA5TByy9o+WHFvF51dHFbX/UFdVyfJQgsCdFuC6uMF9xmrvtWsz0RgxB
w1bU8soRX4soESwDVnU5ZeDeFNQ23G4xG77Xs1bM0xjsg0z7Jp2w1OFs58W+UXPM
IhNw1Zwet0ImfLBcccvx+l439gYQxfsqGZkZDskGBbq2Tibu2SK7mV0E7s2SHEm/
g6Kd7I9OEoUZLQ2lZFTri4+m1ijBJnEPVc/sGJgQ2bPQtEcwQOiUr5JUIoGbdOyS
NwUxwSWP15mZ92Q6SbX8JCnJDBFdvXrZG5tEojl5rpCDgK69x5Dv5cNb+wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFHSwg2UClRifAJqnTBLLxh7iP6dTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyL2Q1MzFh
OC0wMmFlLTRiMGItOGY0NC01Mjg3Njk4YWZmM2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvZDUzMWE4
LTAyYWUtNGIwYi04ZjQ0LTUyODc2OThhZmYzYy8xL2RMQ0RaUUtWR0o4QW1xZE1F
c3ZHSHVJX3AxTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwW8OMA0GCSqGSIb3DQEBCwUAA4IBAQB9feR2
DZ+OySUH8yweigTGleNEjv6GA3V+c+skKvtFSpCVaLOJmbHe9kwBdaLks0NApcCt
ENncn/mgsq2RU8o+QH9ttL6RTl/KXyQyUrnX7WoC647zvkJrt11tskoUmZqZKn+N
LmRcfj27G3pa//mz+Jd33i/iU907K34Xujgl4NqLUipQ30tJSqdZvUO2oMMvb3Nm
gqCxGjchN0pF1zYGUohc1GZdD4xpPqQb9zJLfNfckR11MHpZmjtEHXdLHD+AM5pO
MAdIUqXHC/PL7//FeJqCP8AljvaX46gJYU1TD1H0jH7Gw6sQOHJ9wm9FkoDCV/Id
QTG3nmki5WAJT2hg
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:47 2025 by rpki-client