Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
File: p_ANG___OlPpT4Z9dD0DG5IttbE.cer (raw, json)
Hash identifier: gAsGEhpvhyHUeivSq6F2tMyh4kXOWd6sJHom7g5K56I=
Subject key identifier: A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC38037D87DC388D52E30655E9BC4F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 46.29.0.0/21
IP: 2a03:6e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:38:03:7d:87:dc:38:8d:52:e3:06:55:e9:bc:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:71:a4:53:ff:6e:e7:a7:f2:80:1e:4f:86:
04:ea:44:7a:a5:78:3c:81:a6:47:77:8d:2b:f2:ef:
03:c3:ef:b4:82:a1:27:38:69:01:cb:8f:39:e6:81:
39:ec:33:1f:7e:c4:8a:a7:39:3a:44:dd:9f:39:5b:
ae:83:22:31:86:b0:1a:22:e8:f5:73:44:6f:e6:f0:
79:17:54:8e:87:c5:7d:a9:05:4a:01:5c:59:1b:05:
0e:80:3c:03:42:85:52:f1:06:bf:3e:08:90:45:9b:
db:d0:e9:4d:b0:fa:95:62:b6:98:4b:2b:78:32:3c:
94:ab:96:d4:6e:ca:f8:a1:ed:ce:36:f7:c7:1f:2d:
18:e3:82:71:db:e3:51:5e:5e:18:95:22:fe:16:c1:
09:2d:e6:a9:43:c0:e3:c8:94:42:28:e0:94:f6:dd:
f2:c9:ff:4c:69:da:ee:0f:2f:a8:54:89:0c:d8:cb:
bb:bc:be:ed:e7:e0:2b:ee:4e:dc:cc:d9:00:2f:77:
f8:75:e9:19:0e:c5:ea:cb:8a:58:80:f2:77:e5:55:
40:09:1d:a2:2e:dd:89:e9:19:2e:ea:f5:22:b9:fc:
46:21:55:99:c8:19:18:03:50:ed:5f:4f:65:27:2a:
30:1c:2b:f7:e6:09:66:21:ac:5d:3f:e1:e2:16:f2:
fd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.0.0/21
IPv6:
2a03:6e0::/32
Signature Algorithm: sha256WithRSAEncryption
45:e2:42:06:ba:91:55:35:b2:6d:6f:3f:55:ac:e0:1d:68:b0:
16:c3:93:43:31:32:6f:12:c5:0a:4b:a5:f0:74:b0:9c:10:a8:
4a:c4:b0:78:73:e2:00:41:68:8c:39:5e:1d:3e:04:bb:0d:74:
ca:9e:81:db:7e:49:81:a5:45:0a:4d:80:6b:b3:39:07:5d:86:
a9:ff:09:59:ae:83:1e:0c:56:95:7c:07:7f:81:65:53:de:ce:
54:50:89:3a:96:84:1a:d9:2f:d5:ab:4d:17:4a:16:98:eb:28:
6f:ca:b5:0c:d5:5a:94:b0:ac:3a:14:5b:4a:c2:dd:dc:4b:3e:
24:6e:88:d6:4c:97:38:4b:82:1e:9b:73:da:47:a4:96:ff:36:
2d:cb:85:3c:10:c5:e2:e1:3b:09:05:17:b4:05:66:21:b4:61:
36:90:c9:a5:96:d5:6b:ef:1e:11:11:7b:18:67:ee:61:a6:3b:
01:8b:f6:5d:43:1d:99:4d:7d:6a:ed:74:97:4d:99:5b:af:bc:
e4:d4:b4:0b:3c:fe:0a:9f:8f:10:6f:ce:4b:f1:8a:60:5b:0e:
9a:13:fc:47:50:11:a9:11:21:90:bd:e4:0d:da:07:8c:b0:29:
c2:c0:7c:d9:13:c2:96:4b:36:5d:c5:0e:f3:9c:97:3e:77:40:
14:79:00:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:01:48 2025 by rpki-client