Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer
File: leBbGUrhvlKWmltBBFV_8ELBYCo.cer (raw, json)
Hash identifier: UB4ITwUcHx8K+uwqKR293r6uEWL7HbaNkqy4sZuQORw=
Subject key identifier: 95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421444CC63EFBF773C697B6E84B61F0C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.47.245.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4c:c6:3e:fb:f7:73:c6:97:b6:e8:4b:61:f0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95e05b194ae1be52969a5b4104557ff042c1602a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:ea:de:2b:c9:57:0e:3d:bb:32:f3:68:9e:
34:a5:1d:48:64:53:75:97:60:f3:d2:4b:ec:d4:09:
2c:36:03:ca:b9:6c:11:21:98:24:a2:c5:90:b2:b8:
fd:83:d4:39:50:30:ca:c4:12:5c:2d:3b:b1:12:e5:
56:3b:d2:c8:8e:af:1b:dc:f1:43:ae:7a:50:52:83:
58:ae:c8:6d:76:fe:e9:c8:58:cd:f5:66:05:5b:2f:
a4:e0:ca:20:c6:93:8c:a6:e2:19:98:7e:e7:b4:07:
4e:26:df:63:9e:c0:16:07:66:e5:24:0a:5a:0f:a7:
6a:46:d0:f2:ea:61:ea:a3:94:c9:ad:fc:aa:94:a6:
c9:49:46:94:3d:d8:8b:8d:39:6f:90:1c:32:30:c9:
b1:c2:0a:22:a1:b7:6e:6e:20:a6:15:73:76:03:2f:
a8:08:c2:41:48:3c:4c:7e:3a:36:01:45:3f:df:1c:
96:3e:92:0f:d1:6d:0f:36:37:f2:5c:c8:4f:7e:6c:
c4:b1:eb:6b:df:06:33:3d:c1:7a:ca:43:95:20:d3:
54:c6:3e:6e:30:8d:08:e2:23:81:c5:c3:bf:09:27:
55:c8:0f:8b:5c:3a:52:38:2d:06:3d:c7:9a:dd:dd:
07:56:f4:d0:09:5f:93:80:23:ce:56:df:65:a7:01:
9f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.245.0/24
Signature Algorithm: sha256WithRSAEncryption
64:5f:2e:c4:b2:e6:11:67:6f:8a:4b:57:e2:58:aa:6e:98:ac:
55:9b:a0:89:17:21:4a:a8:d0:ec:b3:2a:01:1e:53:84:b0:24:
62:6d:af:09:2b:d5:87:2b:62:68:90:5b:d5:c0:ec:b7:c4:a5:
ba:8c:1e:88:88:3c:75:db:23:bc:41:de:64:8a:25:88:f5:81:
99:82:dd:d0:54:ff:88:b4:0e:42:06:eb:10:73:da:93:83:7f:
91:b0:6d:4b:c8:30:61:cc:68:9d:84:f6:d0:a4:29:ae:db:af:
0a:9f:6d:d0:6b:f9:2b:8b:98:3d:09:a1:25:4b:84:e4:eb:ee:
09:67:7f:aa:84:4d:33:8a:47:af:64:5b:47:01:31:54:5e:95:
4c:b2:17:76:56:1f:3f:db:c3:c1:51:0c:ee:80:b5:d2:a0:c6:
77:14:3b:23:99:8c:f1:66:04:d3:64:21:3f:aa:6b:ce:d5:9a:
1f:d9:03:41:96:e7:88:b0:b5:43:b2:81:71:94:a2:d7:68:2d:
9a:c7:83:df:6d:a6:15:af:5b:0e:a9:d1:83:31:e5:28:0f:9d:
9c:ef:40:71:86:af:14:e9:de:eb:5b:59:37:22:6e:d6:f7:40:
35:a6:ac:51:a5:c7:eb:1b:47:0e:2d:c5:38:74:62:33:64:51:
58:27:18:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:42 2025 by rpki-client