Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
File: mogMjbFaBDs74WXi2DG6oEerAKw.cer (raw, json)
Hash identifier: NXs2hq3kPlx+0d0HvA/boiI3TBv8eSpFXWD2MgTYQT4=
Subject key identifier: 9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143DFD937536237AB75CAFEE341C3DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 77.95.24.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:df:d9:37:53:62:37:ab:75:ca:fe:e3:41:c3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:2a:d4:36:0b:c4:d4:cb:f8:1d:df:7e:46:
74:1f:86:f6:2c:5f:98:1d:5a:8d:04:49:9a:ed:98:
47:c7:21:26:ff:07:e8:cc:7f:a5:8b:cd:12:30:5a:
0b:e1:72:13:24:d6:e4:ba:55:50:38:21:6b:43:68:
88:22:c4:2a:12:53:7d:c1:3f:de:24:2b:64:8e:4d:
6f:42:7a:da:c7:c7:31:03:62:c2:fd:a6:97:c3:42:
9b:43:29:48:31:85:11:8f:f3:08:72:bf:3c:ef:2f:
f8:1a:47:17:f4:e8:4d:fe:e6:5a:46:ce:f1:67:2f:
db:6f:89:50:41:dd:e4:12:1b:72:a3:bd:88:f9:a9:
93:68:3a:5a:0d:04:b4:0c:ce:76:52:49:2e:3e:03:
fb:3f:6b:b9:38:c8:8a:a6:04:dd:27:50:b3:37:9a:
b8:18:e2:ef:23:7c:b0:72:74:f1:ea:3f:1e:2c:58:
63:be:79:7a:f0:8e:26:b1:e9:03:50:0c:c6:f4:53:
8b:15:1f:d3:fc:66:f5:64:fa:67:fc:98:96:f0:82:
f0:1a:78:65:5a:05:7a:9c:cb:ef:81:d9:f0:89:94:
ea:7f:45:e7:dc:a1:92:9d:e1:0e:e3:44:51:43:2b:
e6:5e:93:4b:56:57:92:89:99:3a:52:92:6c:ed:19:
1b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.24.0/21
Signature Algorithm: sha256WithRSAEncryption
63:88:81:fc:33:4a:16:1c:5f:2c:60:2b:13:dd:38:95:c8:17:
a0:d6:21:8a:29:21:7a:a2:04:05:9b:ac:dd:bd:6d:2e:10:69:
f8:f7:7c:ea:1d:63:f1:a3:10:24:db:a6:22:68:9a:11:76:74:
10:40:75:7b:22:c9:d5:c0:73:6b:e8:0e:2d:67:83:6c:73:34:
17:d7:ff:98:0b:18:31:15:cf:d6:41:39:02:99:9e:e9:d7:8a:
9e:2c:11:dc:0b:10:3c:59:ef:1d:dd:70:53:d4:7c:08:20:34:
ca:8b:c8:76:24:97:e1:27:85:45:8a:a3:63:d4:ee:c9:7b:5c:
31:e4:0c:f5:83:af:1b:e5:d2:37:d7:f3:24:e3:fa:ec:54:99:
91:f4:6a:0e:20:35:db:e6:d7:dd:41:4a:5b:d3:36:1f:80:95:
f3:c2:11:21:ec:06:89:de:a5:ec:fa:83:06:50:51:f1:82:eb:
e7:59:0e:c6:fa:03:d8:b9:e3:72:f1:14:59:25:b9:73:6a:08:
92:38:14:5e:66:12:2c:04:2c:f1:96:7d:32:4a:c5:2b:1b:b9:
1d:7e:8e:95:3f:05:6c:eb:cd:49:17:d7:12:9d:76:7c:c6:c6:
9e:e7:52:37:00:e7:f9:af:f9:b7:13:5f:3e:3b:19:42:69:91:
8b:63:49:a1
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQhQ9/ZN1NiN6t1yv7jQcPfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTg4MGM4ZGIxNWEwNDNiM2JlMTY1ZTJkODMxYmFhMDQ3YWIwMGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkYq1DYLxNTL+B3ffkZ0H4b2LF+Y
HVqNBEma7ZhHxyEm/wfozH+li80SMFoL4XITJNbkulVQOCFrQ2iIIsQqElN9wT/e
JCtkjk1vQnrax8cxA2LC/aaXw0KbQylIMYURj/MIcr887y/4GkcX9OhN/uZaRs7x
Zy/bb4lQQd3kEhtyo72I+amTaDpaDQS0DM52UkkuPgP7P2u5OMiKpgTdJ1CzN5q4
GOLvI3ywcnTx6j8eLFhjvnl68I4msekDUAzG9FOLFR/T/Gb1ZPpn/JiW8ILwGnhl
WgV6nMvvgdnwiZTqf0Xn3KGSneEO40RRQyvmXpNLVleSiZk6UpJs7RkbHwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFJqIDI2xWgQ7O+Fl4tgxuqBHqwCsMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyLzI4ZTc3
YS1lZGUyLTRlYjctYTM0Ny05ZDNmMzkzN2NjNDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvMjhlNzdh
LWVkZTItNGViNy1hMzQ3LTlkM2YzOTM3Y2M0Ny8xL21vZ01qYkZhQkRzNzRXWGky
REc2b0VlckFLdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDTV8YMA0GCSqGSIb3DQEBCwUAA4IBAQBjiIH8
M0oWHF8sYCsT3TiVyBeg1iGKKSF6ogQFm6zdvW0uEGn493zqHWPxoxAk26YiaJoR
dnQQQHV7IsnVwHNr6A4tZ4NsczQX1/+YCxgxFc/WQTkCmZ7p14qeLBHcCxA8We8d
3XBT1HwIIDTKi8h2JJfhJ4VFiqNj1O7Je1wx5Az1g68b5dI31/Mk4/rsVJmR9GoO
IDXb5tfdQUpb0zYfgJXzwhEh7AaJ3qXs+oMGUFHxguvnWQ7G+gPYueNy8RRZJblz
agiSOBReZhIsBCzxln0ySsUrG7kdfo6VPwVs681JF9cSnXZ8xsae51I3AOf5r/m3
E18+OxlCaZGLY0mh
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:57:55 2025 by rpki-client