Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
File: dlOpinSeVpdEoe3iyUDy5DPEQIo.cer (raw, json)
Hash identifier: tETHivqXWiLe+IUVNjNGaOZ18g+l7HWxUtl13BYjam0=
Subject key identifier: 76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5EABD816A1500EFAD124498FC2933
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50751
IP: 91.242.52.0/22
IP: 178.216.0.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ea:bd:81:6a:15:00:ef:ad:12:44:98:fc:29:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7653a98a749e569744a1ede2c940f2e433c4408a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:a5:1c:37:7b:cd:53:b3:94:b6:61:ad:5e:
80:94:0c:f2:e7:7b:96:8e:82:b3:3a:b9:c6:9e:c4:
5f:0c:20:69:0d:f0:ae:f2:85:d4:6e:d0:30:ee:ae:
e3:0d:05:a6:33:98:6a:37:eb:53:64:20:e2:5e:c1:
ac:a2:01:1d:b0:6a:45:c5:01:dc:98:2d:c3:c6:b7:
49:8d:fd:de:bd:b2:af:b7:3e:6d:2b:e7:31:4c:87:
e0:80:70:69:04:ce:13:de:a7:d0:a9:7c:77:36:b4:
c3:24:e9:2f:23:b7:36:8e:d3:27:87:ef:cf:52:0b:
9a:1f:9a:87:81:8c:c6:bd:88:6e:41:20:33:0f:01:
f8:cc:39:bf:d8:70:c9:1f:59:96:af:5c:e3:c3:3b:
43:fc:93:b7:0c:50:45:c3:4f:aa:e5:e3:f3:5d:3e:
1b:19:06:b9:a3:6b:29:26:d6:0e:09:ad:90:0c:69:
b9:9c:da:b2:b4:88:b2:c4:1e:a8:7a:f6:e8:94:ac:
9c:06:c5:34:32:7d:4b:b6:f3:a2:e7:65:6b:2e:f1:
cf:ed:72:f3:a1:bf:bf:c8:03:c8:a2:5f:72:ec:81:
96:fd:4c:4f:b0:aa:f3:f6:2e:0d:a9:02:34:6b:36:
49:e5:3d:8f:de:f1:ca:24:c3:2a:bf:10:da:e5:02:
27:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.52.0/22
178.216.0.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50751
Signature Algorithm: sha256WithRSAEncryption
84:e0:5c:a8:4f:40:d2:dc:cc:39:eb:df:18:a4:f1:a1:bf:65:
fe:20:a1:ee:11:c4:68:3f:58:4d:6d:8d:8e:15:1a:39:b5:40:
c1:ed:53:64:8b:d0:4e:0f:7d:a7:ed:18:44:ba:c9:3e:66:c2:
43:ef:73:cd:b6:0e:6e:f4:b3:bc:34:13:03:f3:e8:ed:da:db:
4f:e9:68:78:46:ee:dd:7a:26:97:97:f5:4a:10:ac:21:d6:06:
6a:72:7a:08:e7:6e:c5:7e:fd:e6:82:d7:d0:14:8f:bc:3b:fc:
be:a3:b4:07:26:dc:7d:55:35:50:e3:e5:6e:4d:cd:1b:34:f6:
56:12:b4:b2:31:9e:b4:a7:c2:03:37:b6:da:18:01:0e:f5:a5:
e5:95:fa:a7:af:13:fa:2c:71:f2:6b:69:36:98:a2:f5:11:ef:
ee:e5:92:4a:f8:1e:9c:b0:c1:4b:9b:d9:d4:b8:46:ac:f4:d3:
76:64:1f:be:84:00:c3:f6:aa:dc:76:7c:63:8e:c9:31:52:a3:
68:b6:aa:01:6b:dd:66:f0:74:9c:b1:68:3c:ec:04:b3:bb:f1:
b7:c2:14:f4:f7:a1:42:09:e3:f3:56:03:08:63:32:16:c2:ce:
f9:55:ad:81:9b:f1:a8:c2:e6:da:28:ee:3e:f4:fd:58:f7:f2:
6b:c7:0a:0c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:04:46 2025 by rpki-client