Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
File: imAdLqH5SMoBjDNb7actvsB51uY.cer (raw, json)
Hash identifier: u4leCQJGwu5QcevVMRpdB7opamZXTR99Jun0/kwWmr0=
Subject key identifier: 8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B6B49AB57521478AD6C47C2DDC8E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.227.228.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:6b:49:ab:57:52:14:78:ad:6c:47:c2:dd:c8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:fd:7d:36:5e:54:98:d9:f2:72:06:29:fb:
e4:76:aa:a9:1d:80:4e:d7:ca:a6:8d:18:4c:33:18:
78:05:f7:d8:19:75:b1:2d:c0:be:c7:01:83:20:87:
24:82:c6:4d:63:cc:e8:2d:81:50:d6:b4:e7:9b:e4:
eb:31:66:d9:d1:07:07:fa:1c:ae:1f:7c:94:de:b8:
57:46:fb:49:7a:f0:61:4c:ea:df:bb:10:ef:11:0a:
e2:80:25:b5:8e:1c:66:4e:40:bf:07:de:fe:e2:ea:
66:1d:e5:47:5a:dd:44:42:b3:b6:4e:0e:6c:e9:3a:
ef:4e:6d:b5:db:e3:e7:a4:f3:ed:68:60:57:11:a1:
36:e0:d2:2a:b2:8b:37:fa:4b:b8:55:fe:1c:8f:4e:
a3:9f:30:d7:0d:49:85:ba:93:6d:b8:50:ed:97:93:
31:fb:95:cf:4b:dc:a3:fb:3c:4d:c2:08:1b:16:24:
27:bd:86:d4:10:1a:0b:08:5f:3b:e1:2e:8f:7c:1a:
43:8b:a2:40:9d:16:89:de:f7:99:7e:de:b0:7d:ff:
20:b1:1f:94:1c:77:a5:62:e8:2d:95:09:5c:21:9d:
75:24:b5:31:37:72:44:05:db:12:7f:97:e2:19:55:
ed:23:07:05:6a:b2:99:a8:2e:2c:31:15:2c:cf:62:
dc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.228.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:fc:9d:a0:fc:58:b5:64:7f:eb:42:45:7f:b3:45:88:81:62:
a4:fa:e5:1e:e6:5f:91:b5:ad:bf:82:88:ef:e8:db:9e:c8:dc:
c0:67:d4:2b:2d:78:d4:8b:e3:2d:25:37:7d:9d:74:1e:f1:07:
7b:04:3c:a2:4e:ba:08:46:07:ad:7e:50:f5:58:05:87:b3:f3:
c2:0f:61:03:bc:a2:a3:3c:e3:bf:4b:1e:02:b4:6c:45:94:3e:
40:f6:9d:6a:36:b7:a2:0d:f8:42:2e:8c:93:f2:43:20:57:ac:
48:f1:eb:2b:5b:1f:f9:a6:49:41:be:b0:2b:01:14:97:80:f7:
34:f1:96:ad:23:aa:1e:c4:e2:3b:5f:d2:47:21:0d:a4:c8:34:
2f:e2:71:49:d5:94:0a:86:af:62:2b:58:4d:1a:08:00:df:62:
91:a3:52:88:51:72:4f:2d:77:0a:36:ba:50:7f:93:95:a4:bc:
2d:93:fa:ac:c1:4d:ae:f1:41:6b:f7:21:27:af:c2:42:2e:d8:
2d:d7:12:70:43:74:2a:aa:39:a5:0e:1b:f4:9c:7e:ab:d5:44:
ea:9f:6c:db:fa:a5:da:f5:fb:19:19:79:d9:3a:15:18:b1:0d:
2c:cd:fa:a2:d4:5d:0e:52:c6:1b:dc:95:aa:51:bf:2c:2f:21:
32:b1:a4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:49 2025 by rpki-client