Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
File: fPl3gtbyAqcBg2capjDHOrozMH4.cer (raw, json)
Hash identifier: DYz7ilwmlQQr20sYql+/CyH6jCg7sPdHlSun/lLP75I=
Subject key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9BA76EC4891F8842B831909739FF7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.196.152.0/22
IP: 2a0a:6e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ba:76:ec:48:91:f8:84:2b:83:19:09:73:9f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cf97782d6f202a70183671aa630c73aba33307e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:44:1e:75:84:15:97:e1:2e:4b:fe:5f:2e:90:
9c:69:5c:bf:d9:5f:84:79:1c:df:c0:d2:73:b4:52:
6b:b8:d6:5b:b2:cf:b4:88:66:42:89:7b:8b:d8:40:
cc:d7:6d:9a:aa:6d:6f:9e:57:0e:82:f7:0e:7c:d3:
d4:f2:e3:bc:d2:b6:c4:71:d3:1e:49:6a:26:02:9c:
c1:e7:1a:32:9f:6d:34:bb:a7:3f:57:fd:52:f6:89:
1e:08:15:7a:78:88:61:21:d9:b2:24:06:5e:72:fe:
d6:e9:df:8d:3b:70:2e:9a:14:e5:6f:6f:af:f8:ca:
00:12:69:6c:05:91:bc:ab:34:b7:7e:c5:5b:dc:ea:
f6:82:91:ae:ff:b4:88:86:4c:4c:46:8d:e6:41:ff:
50:1b:51:69:1c:95:f5:4d:e2:51:cd:c6:8b:7c:20:
e8:87:46:4d:96:2d:16:35:d2:5c:71:bc:da:82:91:
35:37:4d:77:38:c5:13:70:08:5a:3a:bc:dd:ff:b4:
7d:04:87:ce:1e:0d:8b:03:6e:0c:83:88:b6:02:02:
7d:12:7e:89:7b:a0:59:d9:fd:45:18:f1:6f:a0:27:
b7:42:1f:f9:21:fa:48:0e:dc:24:d2:7f:53:06:a9:
e7:de:54:35:b2:04:a7:3e:f8:52:60:74:83:98:d2:
6e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.152.0/22
IPv6:
2a0a:6e40::/29
Signature Algorithm: sha256WithRSAEncryption
43:76:6b:24:52:13:89:8d:f9:76:d9:94:de:42:5a:06:c4:c9:
86:f8:16:25:17:34:80:f7:b4:a6:5c:8a:0f:77:aa:08:e7:10:
f7:39:44:1a:02:90:03:96:39:39:0c:08:b4:74:e1:5b:e1:1b:
0b:a5:85:39:1f:7e:c4:e6:54:f2:64:0b:6d:dc:98:d9:c8:63:
e4:09:9c:85:9d:8b:0e:a7:76:53:42:ce:2c:f7:0d:84:a7:94:
0c:3e:dc:2b:88:7c:e6:a2:ae:a1:f6:fa:a0:05:9c:54:fe:56:
cb:d1:92:d3:fb:0a:e8:a0:2d:69:f7:cb:ec:97:e8:94:55:b3:
8d:6d:08:0e:d8:dc:90:7a:d8:4c:8d:d0:f1:12:d9:ea:69:c7:
d4:92:54:bf:2e:1b:38:db:14:38:32:2e:61:98:06:15:a3:6e:
95:92:27:59:c0:e8:63:fe:7d:9c:fe:da:43:de:f1:56:13:a8:
44:b1:39:e8:68:da:ca:65:c4:9d:13:06:94:c2:0d:a1:57:af:
7a:37:48:75:36:fc:ec:44:f1:b1:16:2f:90:3f:50:8a:93:e5:
24:3d:b9:58:5d:c5:61:9d:29:16:c1:b6:8b:f0:2c:30:a5:52:
dd:4e:2f:21:46:25:6a:47:9c:ff:79:85:17:c6:5e:fe:af:fa:
b5:a6:d1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:16 2025 by rpki-client