Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
File: o875PLessPtJuiiKeg-_JtMAT6U.cer (raw, json)
Hash identifier: Q2jgN3xZr9aSvOoc+sdU9gm+vOo5jW4gjr5wQtNiasM=
Subject key identifier: A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5C06287040E9B4E52BD6D1FFE6A9D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.36.164.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c0:62:87:04:0e:9b:4e:52:bd:6d:1f:fe:6a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b2:2a:88:97:8f:ff:78:04:74:ea:e7:ed:b2:
6a:f1:1a:01:5c:72:01:b3:d8:83:34:c0:bd:dc:cc:
55:36:7c:5f:91:31:98:fb:70:d9:83:11:3b:86:d1:
2e:ca:2d:f8:81:79:cc:44:58:bf:17:ae:3c:d5:62:
5d:b4:08:31:06:5d:50:1e:94:26:ae:99:22:a3:b6:
a1:29:97:f4:bb:5a:d4:bd:38:cf:80:a4:56:88:00:
a9:19:a6:7e:63:62:8e:5f:4f:fa:3f:4a:9a:6e:9e:
96:fd:1c:24:01:cf:19:6b:fc:c5:47:43:55:f2:b0:
21:93:7f:12:82:f6:4d:80:e6:a4:5a:5b:90:f4:2a:
66:69:6d:3f:b5:b7:fe:bb:09:10:a9:83:fa:55:c7:
2d:ea:7a:d0:4e:f9:ee:3a:de:4e:0a:5a:15:08:23:
f1:5a:8c:1e:6d:92:22:b3:3c:d2:77:d2:59:6e:9a:
65:74:c5:c5:d4:36:fb:f5:fa:59:b1:b2:9a:e5:d3:
c4:f5:b8:8b:e2:04:19:dd:e0:64:ff:59:3b:89:a7:
ca:ac:64:3c:d8:c6:52:92:14:5d:f5:dd:e2:61:70:
45:4c:b9:08:8c:e3:d5:8e:ce:a5:67:7a:69:f9:52:
36:85:8b:90:52:dd:81:ec:1d:f2:32:95:0c:c0:4e:
ef:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.164.0/24
Signature Algorithm: sha256WithRSAEncryption
98:98:5e:92:e8:34:e5:8d:02:84:c7:09:f2:03:bb:cd:2d:df:
08:bc:f5:2f:be:af:ee:d5:12:ee:26:5c:3d:82:1b:ee:ed:19:
31:0b:a4:b6:aa:0c:7c:1f:22:5f:2b:5d:6b:d1:d6:e3:41:c3:
de:d0:80:16:56:ed:75:bf:4a:b0:e3:09:95:cb:1a:0d:7d:5d:
1b:4d:83:d0:03:8f:b8:85:25:41:b0:0f:d7:e9:22:32:45:60:
fa:30:e7:9b:c4:e9:73:af:25:60:eb:9b:73:75:cf:e6:90:a6:
59:6f:9f:28:6f:9c:a3:b6:e7:f3:3a:bc:f9:64:30:ea:9b:9e:
d9:67:8b:7c:94:f1:bb:8f:68:5e:87:58:af:1b:c0:cf:82:43:
d7:cc:76:f1:39:8c:72:7c:5b:16:fb:bb:a5:50:35:75:9f:d2:
3e:35:58:76:98:d1:82:29:52:ba:4f:36:e9:a8:e9:f7:81:c9:
3d:ed:f9:7d:1d:a8:d6:47:74:aa:23:c7:e7:36:14:1c:28:bb:
d2:56:3c:7c:9a:0d:74:82:25:e0:e5:8d:c5:19:e5:23:27:94:
1c:38:17:a4:cc:b8:91:3c:e3:7e:57:81:e6:18:c4:29:fd:cd:
03:89:1b:ad:9a:7a:d3:30:22:99:97:2d:8c:11:22:cd:29:ab:
16:c7:3b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:57:58 2025 by rpki-client