Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
File: dOgVmhbXKz1s37qgltaROf3p0pA.cer (raw, json)
Hash identifier: C17thvaNcM9uv4jlIriWZqS7gKqrXM0fl/bIiBR1E3c=
Subject key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC41E119D79E73515E4A571AFF009A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a14:5200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:41:e1:19:d7:9e:73:51:5e:4a:57:1a:ff:00:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e9:e2:ac:15:19:e9:9f:e6:43:18:b9:f3:c8:
69:ca:8b:fe:05:4c:93:e3:0b:3d:89:76:07:89:8f:
58:ac:f3:e4:2d:de:5e:e8:49:55:85:ae:20:a3:6f:
b9:e4:cc:bb:1b:1e:92:f1:96:19:5a:bb:a0:b8:c2:
d0:d1:33:f2:8e:2d:77:48:eb:6f:f6:7f:4f:1d:3f:
8d:83:85:47:21:7e:60:dd:07:39:ba:bc:c1:1f:c8:
56:02:93:31:3b:05:72:49:25:66:a7:e5:75:f2:95:
ba:8a:5a:4d:5a:b2:03:9e:29:7e:e3:9c:ab:72:3b:
2a:e2:10:e1:a8:12:f5:ef:0b:16:62:5b:54:ef:a7:
f2:e1:38:5b:4c:50:d6:ac:8a:a6:82:d4:ca:33:9e:
eb:97:29:70:2d:18:16:cc:04:dc:69:e8:19:86:47:
7e:87:21:03:88:b9:f7:f9:ff:21:d5:c2:c3:27:f0:
ab:02:b4:a7:7f:02:60:b5:88:69:6a:c0:95:ac:bf:
4c:e7:bc:e8:f4:77:fc:7f:ec:bd:9b:dd:4c:a3:74:
d2:8c:8a:4b:45:a2:89:e7:93:95:ed:96:0f:6f:6c:
6a:63:88:47:02:c0:c8:3a:20:6f:ea:3a:93:f9:83:
6e:ce:fc:c8:fb:61:cb:da:81:ae:fe:2d:26:08:97:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:5200::/29
Signature Algorithm: sha256WithRSAEncryption
91:e7:57:e3:c4:6d:ba:59:b7:3d:31:53:c4:81:74:7f:55:e2:
fd:9a:48:14:0c:c5:f4:a8:9a:c4:16:0e:c7:ef:f7:10:a1:49:
52:4b:3b:50:ad:7f:e1:27:4b:b3:12:16:40:ae:e9:ad:16:ee:
1d:f0:0e:70:0b:72:f2:e7:9d:67:27:ea:9f:11:43:5b:22:73:
00:8a:59:64:37:f6:7a:9d:77:f5:f8:0c:15:23:c4:44:d9:82:
f8:d4:12:2a:ca:78:6f:d6:34:4d:de:00:af:06:07:eb:a3:d1:
eb:5d:fc:69:12:b6:05:72:7a:39:dd:c8:a9:82:41:60:ad:73:
cf:19:e8:8f:4e:03:17:4c:f4:1c:1d:f2:b0:5b:d2:e8:f2:a3:
92:44:44:08:81:25:95:e6:b9:07:d1:c0:64:7c:d4:5c:7b:32:
fa:b3:73:77:e4:0d:a0:08:79:74:b9:e5:b8:02:10:58:fc:1d:
f6:a0:b0:1f:b0:36:98:33:72:2f:87:9c:cb:71:4b:1b:29:db:
83:bb:d2:bb:36:a3:79:71:a9:ec:f0:49:6f:5a:13:bf:7a:98:
79:96:36:1b:16:a5:f4:b2:af:1c:31:74:0d:cf:8b:3c:da:79:
95:38:bc:f1:b1:50:90:30:df:01:59:63:fb:6b:6f:df:0b:74:
30:91:ab:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:45:18 2025 by rpki-client