Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
File: flHKwc4q_hlYsftqYjdxewtdSBA.cer (raw, json)
Hash identifier: jhmzVkBZhf94C11m19VNkpY+C/tf1gYV/NNbHrL+muU=
Subject key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194D63E1573EC136FAA9A2B02E7A736F4EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 05 Feb 2025 13:13:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 141.98.40.0/22
IP: 2a06:e940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d6:3e:15:73:ec:13:6f:aa:9a:2b:02:e7:a7:36:f4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 5 13:13:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:51:7a:ec:f6:a2:a2:96:1b:45:54:da:82:95:
af:bb:fd:f7:62:22:8d:56:b9:af:4b:b6:a1:09:19:
f4:4f:27:ff:b4:91:7c:93:94:7a:54:cd:65:3e:5a:
12:82:52:14:fb:db:cb:16:ff:0f:34:92:e8:4c:8c:
da:a3:93:61:f9:bd:d5:61:6a:1c:21:b1:1c:0b:d7:
43:38:ef:91:39:c0:e1:47:8f:88:d0:fc:f2:9c:3f:
18:a0:28:aa:64:8e:79:49:52:5a:ab:e0:6c:55:b0:
16:9d:6f:72:32:57:04:14:8a:ef:4a:f8:b0:7c:3c:
cc:aa:b1:a8:57:60:d7:fb:33:8c:b8:48:3e:f5:b4:
c5:06:78:39:82:2a:8e:0e:c1:67:d7:35:e4:d7:33:
f7:d5:a3:e6:6c:51:9c:b5:f8:77:56:40:46:a5:87:
2c:bb:ff:59:e6:96:6a:95:81:f2:90:a8:e1:20:bc:
39:73:cd:d0:9b:5f:43:7d:33:5f:a3:5a:45:26:73:
0d:0f:ba:68:b7:90:b2:1d:25:cc:1a:b8:fa:49:c7:
b9:ba:6b:c2:9d:05:e8:e7:25:e3:40:78:0a:2b:45:
0e:d6:99:d7:4b:f7:8a:b2:e1:90:ab:cb:45:a4:b2:
48:57:22:ac:7a:d9:09:bc:7b:3b:3e:2d:ce:4c:0d:
ec:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.40.0/22
IPv6:
2a06:e940::/29
Signature Algorithm: sha256WithRSAEncryption
73:e2:10:24:34:ea:4d:d4:a7:c0:4c:a3:c9:25:8e:a9:ca:0b:
be:3a:1b:44:98:40:3f:8f:6a:42:6a:ee:f4:e0:a0:92:37:0d:
89:b2:ab:ef:c2:1f:c7:75:8e:70:44:72:39:4a:ba:7c:b0:8f:
8c:fe:b1:b1:bb:53:28:4e:71:01:46:d0:13:cc:6b:05:4c:97:
2f:aa:3a:f7:f5:43:84:9e:a6:1a:f5:51:2b:51:b4:e9:78:e2:
89:3e:6d:8c:83:b2:4a:45:e4:60:d2:4e:a1:c1:94:8c:02:48:
1a:5a:fd:41:1f:9e:24:05:8c:79:53:0a:2e:f1:2c:c2:21:e4:
e1:bd:0e:d0:09:2f:8d:98:63:36:66:27:f1:c0:a8:c8:c6:58:
58:9f:b7:69:26:bc:e1:08:ae:f8:88:bd:c4:8d:8c:31:37:bb:
5c:83:cc:21:47:db:4d:15:70:9f:f6:48:18:9d:77:e2:06:82:
60:a6:b8:28:4c:02:fb:a9:88:59:d9:31:49:7d:ce:2c:73:ce:
75:61:33:b1:3f:8b:8c:59:d0:cb:51:3d:c4:a0:48:4c:a1:4f:
92:92:34:6b:ff:07:c3:39:71:fb:92:be:07:9c:2f:e8:48:84:
d5:7b:e7:aa:88:77:9d:b6:9b:88:48:98:8a:dd:6f:37:a1:d2:
e3:89:56:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:30 2025 by rpki-client