Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer
File: idSzdf1Mr9XfusQG3SWmHSLdNso.cer (raw, json)
Hash identifier: hGByl5j5CqNt0w3WfIK7I/8T/14txNxu9Mmd4mt0UME=
Subject key identifier: 89:D4:B3:75:FD:4C:AF:D5:DF:BA:C4:06:DD:25:A6:1D:22:DD:36:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D628A9F2955D2D0BDBAA640843C787
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.255.139.0/24
IP: 2a10:bfc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:28:a9:f2:95:5d:2d:0b:db:aa:64:08:43:c7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89d4b375fd4cafd5dfbac406dd25a61d22dd36ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:be:9a:ba:aa:7f:a0:fc:75:b3:d8:d5:da:
59:53:27:87:54:dc:e3:4d:88:66:86:83:fd:5e:a6:
ca:a3:74:54:c6:95:5b:4d:4f:69:80:43:56:de:a1:
96:66:be:67:ce:6c:0b:92:49:da:98:08:8f:c6:c1:
e3:81:41:13:1e:48:ad:72:9e:8e:6c:6f:07:c7:50:
2d:66:5a:11:c5:b3:f5:a3:71:54:2e:fa:e1:c2:68:
68:67:7e:8b:d5:5b:23:c2:c0:64:86:0c:9a:cf:dd:
e5:84:3c:e3:42:96:14:bb:bc:d0:c7:1c:1a:6d:a3:
27:aa:6d:1a:45:02:78:52:00:c0:a5:15:00:df:14:
ce:f9:a3:1e:1e:2b:44:7d:dd:99:ac:f3:bb:45:41:
58:c9:b6:58:0b:5a:29:6f:f1:e5:05:fa:b2:c7:65:
87:5f:db:b7:08:1b:42:27:43:5b:93:53:39:03:da:
e6:ac:7d:0d:9d:b7:d9:66:ed:47:f9:77:19:c7:fb:
3c:7b:f8:be:1a:ec:58:d6:14:59:1f:1b:db:22:19:
ac:f1:89:bf:f2:d9:b7:73:53:28:21:44:89:d8:20:
19:56:83:fb:13:11:42:30:57:fd:41:3a:a8:8d:8f:
02:ad:9a:23:b2:5c:6e:69:7a:d3:cb:0b:59:e6:01:
29:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D4:B3:75:FD:4C:AF:D5:DF:BA:C4:06:DD:25:A6:1D:22:DD:36:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.139.0/24
IPv6:
2a10:bfc0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:2a:2f:de:c5:7e:70:60:12:a5:ff:00:39:74:e8:e0:6d:5b:
7b:ff:10:74:0e:82:f6:77:d5:41:a7:6c:ba:d3:2f:a7:b6:92:
66:cc:46:08:14:d2:34:47:99:5d:7b:fa:3c:12:c7:ac:69:e4:
5e:43:9c:31:5f:24:c3:b5:75:58:bc:e4:75:6d:f5:4a:2f:a5:
fd:c1:97:ba:7d:a4:43:50:9e:1c:4b:55:27:7c:6b:fc:2a:7f:
f2:90:0d:a4:da:0e:00:e6:b4:5c:18:c3:e5:a9:dd:79:06:4e:
17:96:2d:f4:69:d1:d7:47:17:1f:43:3f:e6:66:5b:2b:34:f3:
da:e4:96:b0:66:8f:72:c7:00:c8:54:03:5d:bb:84:55:5b:c9:
e5:bc:db:46:b1:3c:b0:24:49:a0:da:f4:41:97:3d:0b:c3:59:
29:f8:64:9d:20:dc:d1:29:e4:98:c6:75:6b:57:0e:67:d4:01:
bc:60:ac:4d:39:60:7c:aa:51:bb:f9:85:b1:2e:c5:8e:e9:7d:
8c:27:41:60:cf:53:83:a9:9c:87:11:4e:de:17:01:86:68:31:
f2:cf:2d:eb:8e:de:e6:2b:bd:05:b1:64:fb:e8:6e:9e:08:21:
3a:52:0e:8f:cd:aa:4a:6d:34:de:1d:aa:99:a3:22:12:a2:26:
03:14:a4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:52 2025 by rpki-client