Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
File: oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer (raw, json)
Hash identifier: qS9deNrlEEfXR5K1uzTqV5OTKw0pFp7kMuom9WMaqD4=
Subject key identifier: A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D63B9E8646FC18084DE117FB42D91E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 93.157.120.0/21
IP: 109.197.8.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3b:9e:86:46:fc:18:08:4d:e1:17:fb:42:d9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1655282be419d21222b506fb7a368c3fe5db23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:39:1f:45:aa:35:80:5b:ef:81:30:fe:ec:aa:
1c:6f:6c:e5:e0:99:0e:0e:1c:f6:69:36:7d:6b:6b:
47:74:86:6f:2b:a6:f7:42:8e:1b:fb:7f:e9:d6:64:
fa:a6:db:a6:90:08:71:54:bc:f5:74:b8:01:54:5e:
d0:a6:bd:4c:3f:09:96:d4:a2:0e:0b:27:bf:ea:16:
43:63:70:d3:97:f6:1f:9f:62:fc:7b:f1:af:e3:c6:
5a:cb:8a:d8:ed:32:63:19:dd:ac:72:4a:ad:29:ed:
46:b4:4e:7e:01:05:df:60:ee:40:98:f0:01:a3:41:
0e:f5:c8:6b:81:2f:73:fd:32:61:85:8a:ab:ca:1a:
92:1b:8a:74:30:94:78:54:eb:b7:fd:8d:8c:17:66:
f7:4f:c7:cd:11:3b:28:e1:f9:79:07:b4:b2:f7:e9:
7f:68:8a:3b:36:31:64:15:95:cd:f2:1f:ee:64:12:
26:5e:11:f2:94:40:a4:5a:ea:ab:c5:47:18:d6:b2:
af:fb:7b:8a:c9:91:ff:1b:a7:e9:2b:88:60:6f:23:
d1:74:87:71:20:4f:be:4d:34:b9:b6:eb:0b:e8:fa:
1c:b4:ec:c2:f2:65:52:2e:fb:d5:fb:2d:d2:c3:be:
27:0c:08:57:a4:86:19:ee:63:e3:8b:1c:e4:cd:7c:
d5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.120.0/21
109.197.8.0/21
Signature Algorithm: sha256WithRSAEncryption
aa:3c:ea:59:39:7a:91:f2:42:65:27:50:e2:7e:ed:50:f4:f4:
7f:cc:9a:26:62:8b:ba:64:05:47:1b:b1:b6:84:c7:de:11:84:
9f:af:16:3d:67:65:6a:98:ef:c7:44:ec:3a:fd:58:aa:3b:4e:
2b:ec:69:78:b0:0b:5d:d7:7a:a7:7b:37:4e:2a:3d:5c:59:62:
d6:8f:cf:ae:b5:fb:ee:d1:e2:17:1c:fb:fb:61:db:54:2c:d1:
e5:0d:ce:46:66:bc:d9:f9:fa:72:65:48:be:c6:4d:99:e1:3f:
6f:3a:9a:4a:39:91:5d:e3:9b:f0:f4:de:5f:b3:67:21:a6:43:
89:7f:41:78:89:98:26:f9:10:2a:b9:02:3c:40:c9:10:86:4a:
dc:3a:3a:dc:b3:8d:0a:27:8f:eb:4f:e0:14:c2:0c:ef:16:fb:
89:4e:71:ff:3b:41:aa:31:c4:ad:17:c7:52:b6:73:fe:92:74:
d9:ef:00:07:35:21:83:f3:dc:4c:13:a4:fd:3d:c9:1f:b2:be:
80:75:2e:f5:45:89:74:84:6f:a2:6d:86:3d:10:df:9b:b2:d9:
f5:e3:82:bc:05:d7:8b:25:50:3e:18:03:ab:0c:83:e8:5c:f2:
da:58:9a:4a:5a:79:f5:ae:74:9f:7b:1a:b2:4c:71:29:07:28:
20:23:5d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:02:46 2025 by rpki-client