Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
File: pVB1uOQuRRTvSdP-ovGHJk50-y4.cer (raw, json)
Hash identifier: DS5UtUQIzFjUoQGO6l83IVfh1IxImHdjz/+AEPRlZKw=
Subject key identifier: A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FB734B69034075C9D79D73674ADD3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.84.148.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b7:34:b6:90:34:07:5c:9d:79:d7:36:74:ad:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:1a:f3:d3:ee:b8:f1:22:24:c9:23:e2:fe:
6d:db:ba:1d:1e:44:a1:a3:b5:2e:6c:a7:7b:0a:b2:
9a:cc:b5:c4:af:8a:8b:20:73:cf:4d:fb:0f:33:c2:
08:2f:00:39:b5:2a:d6:5a:1b:e0:44:9d:bf:60:bd:
9c:46:d2:8c:c1:15:7d:02:ef:39:49:5f:dd:2c:e4:
40:56:65:ff:88:d3:ee:b4:04:ae:a4:a4:98:b6:32:
67:ed:d5:68:c8:4e:cc:4e:b2:79:d0:8b:fa:18:f9:
dd:e9:2f:c3:81:d3:d8:33:a5:21:d5:c2:25:a4:27:
3e:55:e9:d9:ba:fd:e4:35:05:0b:ec:5b:8c:db:2f:
99:77:dc:af:0c:0b:cd:40:ad:5a:8e:eb:de:30:42:
5f:12:04:b5:02:11:32:06:06:7b:53:51:0e:e7:67:
b6:b2:6e:d4:e0:03:b3:17:6f:60:de:b5:6f:92:05:
5e:5b:ef:c7:b7:d0:cc:49:e7:66:ed:ce:3c:46:22:
2a:aa:7d:d5:29:5a:55:48:55:20:b5:ec:2f:da:07:
7a:37:0c:ea:5b:2f:26:d9:ee:11:a2:4c:b4:24:91:
fb:f5:6c:b5:42:09:53:ec:8b:2c:ee:d2:2a:d9:e7:
0d:db:7f:19:c0:8e:5b:42:40:4f:f1:76:6c:62:05:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.148.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:7a:ca:f3:29:55:bb:21:84:5d:e1:24:f9:01:14:ed:a1:0f:
18:0d:7a:17:a6:d0:e6:f9:29:6a:a9:1d:63:98:82:94:28:0b:
24:e1:0a:0d:28:3e:0e:f5:c5:b1:17:4e:4c:8b:12:11:60:0e:
f9:07:23:54:47:30:68:36:cb:39:d9:fc:c1:56:43:28:a1:8b:
7e:ca:b1:75:e2:ba:3a:cf:00:65:f8:0e:54:5c:bf:a6:7c:38:
ca:00:66:98:a0:be:63:8f:94:90:79:37:de:b0:60:85:7e:b2:
5e:7c:14:f6:8d:aa:fe:54:c8:89:b5:9c:d1:fa:29:bd:0f:e1:
b2:d5:5c:a2:8c:83:07:b5:84:41:56:1d:f7:20:04:87:c9:f8:
cd:12:bb:df:ba:0d:9d:81:03:5a:38:7c:4a:88:52:7e:4e:b8:
ac:d8:f7:50:6c:61:27:92:70:aa:b5:ce:14:be:ca:70:d2:36:
98:0f:f9:33:5c:5c:f6:25:64:3d:1f:9b:41:57:a1:6e:0c:f3:
20:66:14:5f:b4:68:38:94:87:80:22:ca:6a:81:2e:4c:54:b4:
12:97:3d:d8:3a:fb:f7:b3:b7:68:e6:24:d1:b5:f5:4d:d0:41:
76:a6:58:fb:70:d8:d3:9c:13:74:e5:8e:59:4c:a9:13:22:07:
fd:68:85:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:47 2025 by rpki-client