Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
File: qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer (raw, json)
Hash identifier: H1PDuAtaw6PjWrVbUW/HlHG8EBY24sxHQHeIUepOybM=
Subject key identifier: A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FBFB3DC489BBB061C58703097077FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.113.138.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:fb:3d:c4:89:bb:b0:61:c5:87:03:09:70:77:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:13:f5:85:38:4b:c7:d8:2a:d2:e2:cd:11:11:
77:ec:eb:8e:00:4a:71:f1:f3:c1:80:f7:82:05:90:
33:a4:b3:3a:37:d8:9b:d7:05:bc:5e:b2:00:42:f9:
a4:5e:2a:e5:ed:c3:f8:d0:14:50:cb:e2:10:71:f7:
96:13:c7:b7:a1:12:6b:39:2d:20:54:42:ba:09:81:
18:3b:98:3a:7c:6f:d5:0d:1c:db:3e:7d:f4:3f:74:
e9:3d:07:b6:da:cb:40:2d:19:1d:25:78:59:aa:1d:
e6:11:11:91:3d:58:00:8f:76:c7:dc:bd:e2:3e:3a:
7c:93:df:b9:38:66:ba:a1:44:51:22:0d:d2:78:25:
28:48:11:d5:67:4d:7b:a6:b8:10:f9:0f:ae:81:b3:
94:3c:f0:c6:2c:cc:06:0b:91:18:8c:b8:c2:11:4a:
83:c4:5d:f5:7a:93:06:68:df:fb:b7:2e:06:04:1c:
f4:0a:01:c2:61:f7:5f:fc:b3:c2:cd:aa:2a:e4:25:
46:e4:72:cd:06:c3:5d:b8:a7:2d:c7:25:56:83:d1:
d0:92:17:7f:f1:a8:23:7f:3c:19:f6:d8:25:a8:57:
b0:b6:7c:c8:11:6d:27:ad:d6:c1:71:eb:33:f2:51:
94:f3:55:aa:ff:fa:f4:10:f9:22:c4:87:e2:e1:74:
fc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.138.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a4:9a:a0:f6:b3:1b:8c:83:92:e4:a6:12:69:a5:48:0f:a2:
42:16:0b:0d:64:4c:35:9b:d6:ea:9b:aa:f7:61:15:d3:31:19:
49:91:49:9e:23:95:e3:c6:79:8c:a4:b7:48:16:63:a6:86:2f:
a9:65:e8:ea:62:97:fd:d6:db:5e:66:8d:f5:7f:78:d8:9a:b4:
20:2f:fe:b6:55:26:e4:ea:32:42:c3:31:dc:40:78:0d:8e:c3:
ac:6b:2c:89:54:ba:4d:b6:5f:0d:49:c5:f2:eb:aa:6e:7b:5a:
2f:ab:50:14:5e:7e:2f:37:43:bc:bf:17:4a:29:08:2b:83:00:
a7:58:27:e9:5a:64:99:1f:7d:ab:03:bb:b8:9d:ac:a5:46:46:
b0:6f:fe:32:11:33:d1:e3:54:37:79:c2:d1:b4:e6:87:6a:b5:
4b:96:f2:29:d8:a7:5c:d1:b9:e0:3b:94:43:78:6f:0b:ad:29:
f1:4a:7e:3b:bf:2c:d7:41:33:8b:7e:ee:40:b3:0f:dd:93:32:
c2:fc:d4:3c:66:74:d9:29:6e:42:4b:6d:70:db:0a:ea:b1:27:
d1:03:d8:6c:95:0e:9b:9c:60:25:38:8e:56:bc:76:d0:04:75:
13:c5:56:4b:ea:a7:7a:4a:29:6d:cb:fd:11:50:2b:a3:1a:e8:
7f:db:e7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:44:31 2025 by rpki-client