Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
File: qiEQS093IiTRGFaiTt-UZqhE0mw.cer (raw, json)
Hash identifier: y2nmo+goQ6RNafHejMRoSDIe4RxIZbD9eVz1iaP9YIk=
Subject key identifier: AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA8663F6443FADDCD8A46F634456BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.62.108.0/22
IP: 2a0c:fd40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:86:63:f6:44:3f:ad:dc:d8:a4:6f:63:44:56:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa21104b4f772224d11856a24edf9466a844d26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:b5:b6:9e:54:72:c4:38:a8:97:18:9f:2b:
b7:ec:70:25:c5:9b:95:be:7b:05:4e:7c:ec:1e:40:
5f:54:d9:66:05:91:06:c9:02:37:02:b0:ab:75:b3:
17:ee:90:e2:89:a1:0d:cc:07:1c:45:c3:7e:d6:0b:
99:d6:90:48:f5:c8:2b:08:0d:d7:2c:2b:ef:81:e4:
4d:6a:eb:08:b8:02:4b:4a:6c:8a:64:fd:08:ac:61:
dc:a0:45:fa:d2:36:3c:ad:d2:f9:4f:96:c0:4f:9e:
54:10:45:6a:77:3c:1b:d3:a7:53:a3:24:ad:61:da:
0a:1d:5e:83:32:09:32:40:9e:2b:95:85:39:16:52:
1b:cf:09:2e:d4:f6:83:3c:91:8b:33:8d:fd:cc:8b:
71:1d:9d:ce:ad:09:6b:98:09:c1:3c:86:be:7b:ae:
ac:b7:3b:f0:9e:14:db:73:81:93:54:08:b1:b6:5d:
c7:58:bf:14:b0:4e:48:ef:3a:36:3d:e3:f0:61:ea:
43:60:0c:f6:ed:d0:74:cf:2e:15:8a:d5:8a:ee:52:
49:d5:45:18:18:7c:c8:d6:e2:9a:51:59:7f:11:49:
2a:b6:d0:67:c5:e2:03:7f:9b:c2:42:3c:55:66:4c:
dc:83:79:a7:29:18:63:9d:d1:6d:b7:77:68:6b:82:
b0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.108.0/22
IPv6:
2a0c:fd40::/29
Signature Algorithm: sha256WithRSAEncryption
86:a8:55:6d:a5:c6:12:e2:3c:66:05:e6:b2:6b:4b:59:60:bf:
77:d1:f8:49:ea:a0:6f:f8:1f:75:c2:86:31:38:fe:96:9f:ce:
99:2d:50:20:fd:de:ba:8f:57:74:7e:73:4f:15:1a:12:4e:3a:
a2:21:b4:e6:6c:e3:a1:53:39:46:32:f3:e2:28:e3:61:fb:a2:
fc:69:30:26:ef:14:21:f7:3c:dc:e5:e8:69:6e:3a:a3:c7:69:
e7:ec:8c:10:9d:ac:bf:4a:73:01:c6:bf:a3:eb:b4:39:eb:3c:
d3:85:b0:d1:b9:84:03:eb:2e:78:f7:7a:89:df:d5:dc:0b:f1:
b5:31:30:f6:0c:34:a0:bb:ec:bf:e9:1c:ef:df:c5:c8:4e:42:
81:c6:87:65:86:19:21:6c:76:44:b3:6f:e5:b5:a9:22:a6:41:
a9:98:ba:c7:1e:26:ac:5f:2b:da:60:39:ff:bb:5f:c4:bc:fa:
06:28:97:cf:86:19:1a:ea:25:67:f5:ac:e1:8b:03:64:b1:a8:
f2:d9:53:3f:78:c1:35:6d:20:1e:7d:5f:2c:fd:26:15:3f:65:
a8:33:16:7a:72:53:1f:b7:be:5a:83:6e:d8:65:14:9f:79:c3:
34:79:fc:52:4a:5e:62:95:38:36:ab:e4:fd:8f:ce:dc:dd:3c:
0b:18:2a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:54 2025 by rpki-client