Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
File: pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer (raw, json)
Hash identifier: BhBuStKBmJuum9rLyES3PocsHLDmmqp6uXAJsS8PMxQ=
Subject key identifier: A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A0E7658C379D0398F863D5875B6FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.152.244.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0e:76:58:c3:79:d0:39:8f:86:3d:58:75:b6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:04:2e:8a:14:6e:8c:86:f7:46:ae:b3:31:a4:
1d:36:d1:25:c9:b1:70:4d:81:f0:db:3c:09:88:b9:
5e:3e:c5:d7:b0:43:32:0d:4b:e1:d9:03:f4:17:96:
0c:32:f6:af:40:c7:74:5b:56:8e:21:df:45:02:87:
eb:ec:7b:4f:2b:7b:2e:ef:bf:59:82:a2:d1:76:23:
57:c0:fd:d2:7a:0e:b6:f2:4f:52:4a:9c:1a:7b:2a:
77:f8:29:f4:33:12:ed:a8:03:04:f9:35:e2:4b:89:
87:54:96:73:a5:fd:a4:69:6e:df:51:d4:33:5e:67:
66:73:8b:e5:c8:70:0e:77:89:23:10:44:c4:bd:96:
9d:f1:81:6d:cf:3d:37:ec:b3:07:16:4a:30:5b:66:
e0:25:72:99:a4:57:05:59:b6:c4:5e:a4:e8:83:bf:
f2:7a:8c:b3:eb:ee:2a:f3:d7:e0:b4:c0:ea:00:a6:
a3:00:ce:31:35:5c:4b:74:b5:f2:bb:9f:34:e3:a4:
34:18:31:ec:71:45:3e:f4:ca:5c:0e:b8:2a:b0:e8:
fa:e8:42:4b:c0:31:9f:88:79:3a:eb:19:36:71:01:
d7:1c:6f:a1:9a:aa:c0:73:f8:4b:c8:13:d0:ae:f5:
e8:74:a5:c2:67:a2:e3:b8:5f:8a:4c:78:f5:9f:86:
3f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.244.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:da:73:24:83:f4:d2:e8:a6:86:75:fb:3b:86:d4:fc:c5:5c:
97:73:ca:e9:62:41:c9:ab:d6:32:ed:d1:68:88:12:d6:dc:ce:
9e:a5:92:62:d1:09:92:7e:10:67:f4:68:8e:c4:3f:88:da:87:
47:43:5c:1b:7d:90:7d:de:92:df:02:1e:e1:48:2a:4b:95:3f:
6b:4d:a2:b2:b1:45:0c:46:39:15:4c:e1:4d:7f:16:81:10:e3:
90:65:8b:99:3b:7c:17:e8:ec:aa:86:73:d7:7a:5a:a0:48:1a:
e4:dd:4f:37:e6:31:e3:b3:0b:82:c3:af:ed:87:bd:a5:5a:7d:
b5:a0:80:88:38:50:81:a6:6b:43:09:a6:4b:5f:9e:fd:77:aa:
4b:a2:87:de:ee:b2:c7:9c:d3:fb:56:68:0a:f4:91:cb:74:23:
10:36:a2:cb:9a:57:6d:3d:b5:39:97:2b:85:56:b8:75:88:96:
8e:2e:7f:5f:e0:92:1d:20:14:1d:65:5f:8a:9b:8a:9f:74:f5:
6b:73:96:ce:cf:f3:30:96:f6:27:d9:e5:56:47:51:79:b4:86:
cb:5f:2f:6f:a4:34:3c:28:ca:6a:f5:f3:2c:b9:19:52:e9:a4:
19:d6:77:b1:10:e1:98:2b:f2:d7:ed:dc:04:7d:a3:52:6e:53:
30:8b:4f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:01:27 2025 by rpki-client