Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
File: mnj9TUGkk4S99ufcPrvFAL9m2dU.cer (raw, json)
Hash identifier: UY6A8BWptf/8JQP+NofOiilsY40mF8dMHpd9ywoSOKo=
Subject key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942445551CF8D8317ECEB2EF96691A5BDF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.8.84.0/22
IP: 2a0e:5200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:55:1c:f8:d8:31:7e:ce:b2:ef:96:69:1a:5b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:37:47:3a:9c:fb:3f:02:a2:b7:15:cf:9d:e2:
62:d4:a5:74:b7:e8:93:4d:65:0e:08:40:87:95:c2:
e9:a9:66:cf:e1:df:eb:0e:60:45:c1:91:ce:25:69:
ff:31:fb:e9:6b:41:3b:3a:b3:4e:42:ac:d0:be:6a:
a9:ec:48:45:b3:45:40:17:21:d9:dd:06:23:28:c5:
67:e5:7d:65:b8:fe:59:4f:f1:d7:9b:f8:80:65:cb:
2f:0c:00:9e:27:65:e8:76:c1:de:16:fd:71:1c:a4:
a5:a9:03:85:f3:a3:02:5d:2a:a5:0a:1f:75:10:f4:
1d:4f:53:20:50:53:6d:eb:bd:3b:8d:30:bb:e3:4d:
1f:db:04:99:bf:a7:5a:c5:78:43:86:c4:92:bd:e6:
04:ae:ff:a2:71:c7:84:2e:2c:4f:ce:1b:7c:86:c4:
f3:99:33:e0:f5:2c:13:f5:7f:21:f1:f9:af:e6:15:
7e:a0:bb:36:45:4d:c5:78:19:88:11:ab:3f:4c:7e:
c4:3d:62:05:77:83:57:66:01:7d:ee:dd:e6:87:9a:
c7:cd:4a:09:79:f1:da:0e:25:d5:f0:e4:82:5a:47:
fc:4f:a4:89:11:01:16:80:f5:63:0c:52:83:a9:68:
6d:69:30:23:18:99:65:65:3c:e4:a8:26:60:bf:75:
66:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.84.0/22
IPv6:
2a0e:5200::/29
Signature Algorithm: sha256WithRSAEncryption
a7:1d:8a:a7:91:ff:ea:9d:a9:64:33:6b:1b:26:91:5f:f9:e8:
39:1c:2e:48:c4:4d:d9:8b:9c:40:d2:7e:2d:a9:a7:b9:a2:fd:
4b:71:e8:50:2c:30:d9:d0:0b:ed:3d:e6:18:76:1a:99:de:53:
92:1b:ac:09:6e:c9:b1:79:3a:65:db:67:94:35:0d:a6:6a:58:
53:89:da:d5:21:ae:bc:75:d3:35:78:12:86:95:3e:a5:43:5a:
a8:7e:82:be:ab:46:2b:38:e8:c8:5e:c4:71:66:80:f5:f0:4e:
3a:aa:53:ff:04:5b:a8:82:27:38:dd:09:1c:1e:2e:e1:66:9c:
11:70:81:cb:39:c2:7e:17:2c:f6:1c:c8:fe:3c:ba:fc:93:12:
f3:54:52:03:ad:69:3e:07:08:86:8b:b9:64:92:f5:ec:84:1e:
05:fe:54:5f:eb:d9:62:ce:9e:37:75:a3:25:1c:69:55:a4:6c:
82:ad:3c:5d:db:f7:b4:c2:91:de:04:ba:31:c7:40:da:7b:c0:
b7:53:5c:32:f2:c5:86:ad:5c:dd:04:18:f5:2f:d4:99:e6:83:
6a:a5:83:bf:af:0f:9c:2a:77:76:fc:d4:bb:3e:59:da:f9:6d:
42:0c:8f:5c:7a:92:3a:a2:41:15:1f:1c:d6:df:62:53:07:e4:
1b:68:33:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:57:27 2025 by rpki-client