Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
File: eRP4wTuoKQ9g2mO6iek1snWJOts.cer (raw, json)
Hash identifier: FuUY8NVhpxXkj6RIJXBNVoavc0pFACc5Ah5H1QTVaX0=
Subject key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA41350984BC2F60647A7313EAFFF5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.78.200.0/22
IP: 2a05:6a40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:41:35:09:84:bc:2f:60:64:7a:73:13:ea:ff:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cd:df:52:9a:5a:24:63:c7:9b:5e:45:d2:78:
2d:f1:b1:c0:a1:81:7c:6d:f4:ea:ff:19:b6:a4:e7:
8d:bd:28:a4:64:20:82:02:73:b1:20:ba:f9:17:ab:
e2:3f:1c:5e:6c:ce:a7:29:4d:2c:23:58:b4:24:55:
e1:ea:1b:41:2b:e3:f7:75:6e:64:f5:41:8e:09:4d:
2a:c0:54:07:a7:61:e3:9e:04:36:64:2a:28:55:fc:
10:62:85:f6:d3:f2:80:bc:18:e9:1a:63:11:4d:0f:
52:e1:50:f4:c5:ab:43:fa:d5:c4:00:90:94:a4:96:
c7:3d:1d:43:ba:35:2b:65:5c:50:46:f4:7e:f2:11:
3e:d2:94:1b:a3:a0:37:c8:8a:e9:5b:1d:80:4b:4a:
4c:9c:27:a5:f8:bf:c7:1b:e2:64:c7:b8:60:3f:4b:
d8:74:de:a0:d2:b8:f9:2a:ac:e3:67:e6:ca:b0:87:
3c:a6:9e:10:7e:d6:c6:64:d3:92:34:cc:75:9c:0e:
d5:96:bb:b0:14:62:09:26:83:79:8d:94:f5:1b:39:
92:0e:66:42:07:7f:46:3b:b9:b6:17:6f:44:64:0e:
27:13:77:29:46:55:5b:e2:31:97:bb:c2:11:64:eb:
98:4b:4b:b7:c1:34:d9:6c:a7:0c:b2:37:72:2c:93:
02:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.200.0/22
IPv6:
2a05:6a40::/29
Signature Algorithm: sha256WithRSAEncryption
84:17:4e:81:c8:b0:04:97:d5:3f:a3:99:59:08:a3:40:48:eb:
96:16:c3:fd:72:f3:0a:69:e4:b0:66:20:24:5b:38:a9:fb:84:
a0:cb:1e:9b:eb:d5:ed:28:2e:d7:78:d6:c8:d1:21:70:0f:69:
6b:fc:ae:8b:4c:06:5b:d1:2f:1f:d2:1f:93:86:ff:8c:50:92:
9b:d5:0a:bd:d5:3b:b8:52:8f:23:d1:76:c2:8e:5b:71:36:d6:
46:bc:aa:57:a0:f0:d0:eb:d3:ed:7f:a5:fb:bb:09:74:a6:0e:
fa:a0:4a:2d:c7:8f:70:b1:59:d9:00:ea:61:76:ed:73:bd:f7:
d4:f4:ca:cb:d3:e2:2b:a8:97:d3:2f:27:f1:b6:93:d8:ad:00:
d2:d9:3c:f4:a2:75:3e:02:90:b5:0d:10:65:3c:d3:1d:71:90:
6d:9b:6e:c5:fb:8a:eb:7e:e5:1e:2c:aa:66:61:93:a1:50:20:
b1:58:85:9c:c1:0b:bf:91:61:07:cf:08:30:c7:62:7d:59:ae:
a9:c8:85:41:43:0a:d2:28:5c:67:f6:b1:c0:bd:de:7e:8b:3b:
6f:44:89:a4:7c:f5:b6:29:01:6c:15:ce:1d:d8:52:16:4d:13:
81:65:2a:16:cf:39:d8:9e:3b:e5:81:f5:6b:92:38:5a:7b:d9:
a2:7b:67:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:04 2025 by rpki-client