Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
File: dcqnmRKIh2aA16yQqFafP8IDh_o.cer (raw, json)
Hash identifier: 1Oz5e4VJJab6iInrIjCTqpuG2d+L8xGjTmEVSjO7JhY=
Subject key identifier: 75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3CF4FDBEE4AB4C504828B057C2FFF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.6.144.0/22
IP: 185.8.224.0/22
IP: 2a03:4240::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:cf:4f:db:ee:4a:b4:c5:04:82:8b:05:7c:2f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75caa7991288876680d7ac90a8569f3fc20387fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:72:21:a9:99:c4:44:bb:da:17:5e:6f:07:
52:f6:80:9f:4a:35:06:b3:17:8e:9f:12:c0:be:c6:
e7:80:33:e0:06:88:28:ed:50:9b:a9:e9:b6:c9:da:
e5:96:90:e8:11:8e:b6:9f:1d:2a:a7:49:0c:1c:02:
5c:3d:a2:65:c6:2a:0d:52:77:d3:87:82:74:6e:f3:
63:f4:c1:8f:77:45:78:90:49:0b:95:81:43:46:fa:
5a:46:74:b3:14:cb:72:f2:48:f3:7b:56:02:c6:a2:
5d:a8:ca:0f:a0:d4:7e:50:1e:af:d3:8e:b0:07:cc:
f9:7b:05:39:4e:99:94:a9:23:fe:70:ab:bf:b8:ff:
8d:7e:e5:43:63:b4:6e:a3:9d:49:86:7c:08:d7:98:
4d:fa:de:a9:36:2b:28:99:3b:7a:52:05:e5:6c:a5:
cd:db:f9:4a:77:70:1d:79:99:6d:29:d1:c0:55:57:
e2:93:91:d3:4a:5c:7b:5c:dc:ff:62:3e:46:d4:24:
f5:29:23:60:fe:9c:cc:ca:f1:31:31:42:05:e8:7c:
3d:3c:e1:56:2e:b3:ef:33:49:07:45:06:ed:a3:4e:
80:7b:ad:13:d5:8c:c8:1f:0c:ca:e8:f1:7b:c7:2d:
a1:02:a6:bb:30:e5:6c:7d:3f:64:5a:d1:48:29:22:
1a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.144.0/22
185.8.224.0/22
IPv6:
2a03:4240::/32
Signature Algorithm: sha256WithRSAEncryption
52:43:ba:f2:88:60:79:15:ac:de:02:c4:72:95:a4:3f:0b:90:
5f:3b:a3:e9:75:f9:72:da:bd:87:3e:d7:08:c1:82:d8:e9:41:
9b:c1:8d:0a:41:86:b2:54:39:45:73:3c:a6:62:87:32:b9:00:
7e:1e:ad:dd:70:90:4a:f0:16:cb:7b:17:f9:c6:49:22:8e:86:
da:c9:17:25:7a:7c:5a:fc:af:5d:00:ac:0e:11:16:08:44:6b:
56:fb:bb:f9:f9:d7:47:d4:93:aa:bc:11:bf:af:8b:bc:85:2e:
23:d8:6b:fc:0e:ed:9b:be:11:e4:14:eb:54:92:6d:a9:32:64:
ee:28:2e:49:f8:7c:50:ff:71:a6:16:05:88:c8:fc:18:ac:da:
cb:a7:9f:be:59:0e:47:c7:97:a1:54:29:d7:67:85:71:ee:e8:
b0:dd:3b:67:e1:6c:3d:e2:e2:8f:6c:9f:00:ff:a7:e8:ee:84:
7c:ce:2c:83:d3:fc:69:27:b5:27:53:58:49:bb:99:7e:e4:5f:
6d:ef:3d:31:bb:42:63:3d:4e:de:71:5e:03:ca:36:ec:ef:70:
4a:99:7a:41:13:0f:c1:04:10:7c:74:21:9f:0b:bb:8b:5a:b6:
ed:9b:0b:fb:90:b4:d3:d0:0f:03:c3:e4:0c:0b:09:a4:3d:ea:
4f:21:ed:86
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZQks89P2+5KtMUEgosFfC//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0OTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWNhYTc5OTEyODg4NzY2ODBkN2FjOTBhODU2OWYzZmMyMDM4N2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0VyIamZxES72hdebwdS9oCfSjUG
sxeOnxLAvsbngDPgBogo7VCbqem2ydrllpDoEY62nx0qp0kMHAJcPaJlxioNUnfT
h4J0bvNj9MGPd0V4kEkLlYFDRvpaRnSzFMty8kjze1YCxqJdqMoPoNR+UB6v046w
B8z5ewU5TpmUqSP+cKu/uP+NfuVDY7Ruo51JhnwI15hN+t6pNisomTt6UgXlbKXN
2/lKd3AdeZltKdHAVVfik5HTSlx7XNz/Yj5G1CT1KSNg/pzMyvExMUIF6Hw9POFW
LrPvM0kHRQbto06Ae60T1YzIHwzK6PF7xy2hAqa7MOVsfT9kWtFIKSIa9QIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFHXKp5kSiIdmgNeskKhWnz/CA4f6MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3LzI3NTRk
ZS1hNWQ1LTQ4N2YtOWZkZC1jMzNiMzY0NGRkM2YvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvMjc1NGRl
LWE1ZDUtNDg3Zi05ZmRkLWMzM2IzNjQ0ZGQzZi8xL2RjcW5tUktJaDJhQTE2eVFx
RmFmUDhJRGhfby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCuQaQAwQCuQjgMA0EAgACMAcDBQAqA0JAMA0G
CSqGSIb3DQEBCwUAA4IBAQBSQ7ryiGB5FazeAsRylaQ/C5BfO6Ppdfly2r2HPtcI
wYLY6UGbwY0KQYayVDlFczymYocyuQB+Hq3dcJBK8BbLexf5xkkijobayRclenxa
/K9dAKwOERYIRGtW+7v5+ddH1JOqvBG/r4u8hS4j2Gv8Du2bvhHkFOtUkm2pMmTu
KC5J+HxQ/3GmFgWIyPwYrNrLp5++WQ5Hx5ehVCnXZ4Vx7uiw3Ttn4Ww94uKPbJ8A
/6fo7oR8ziyD0/xpJ7UnU1hJu5l+5F9t7z0xu0JjPU7ecV4Dyjbs73BKmXpBEw/B
BBB8dCGfC7uLWrbtmwv7kLTT0A8Dw+QMCwmkPepPIe2G
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:45 2025 by rpki-client