Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
File: r00WwzVAe_DQpRzvm5wcUxAoD0g.cer (raw, json)
Hash identifier: dzflp1TpL29s0XMxnzlKqsM/ledFznNyDsxQT4qXZsk=
Subject key identifier: AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3925B3EBA6A99CFECE9A82639D402
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.80.208.0/22
IP: 2a03:7c80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:92:5b:3e:ba:6a:99:cf:ec:e9:a8:26:39:d4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:da:78:c0:ac:e4:84:46:87:8f:a9:5e:7e:eb:
44:e4:b0:db:42:d4:ba:64:e9:b7:03:cf:e9:3c:0c:
97:3a:a3:90:d2:76:b6:91:28:4a:8e:58:df:04:78:
58:df:9a:0d:67:3b:25:07:8e:6d:2f:04:71:d0:98:
6b:63:38:26:5f:cc:5e:66:a4:eb:e9:7f:b5:d1:38:
6b:1b:aa:9e:a9:d2:0e:af:62:2c:b4:4b:07:a9:cf:
37:09:2b:e2:69:88:77:ae:30:c0:45:a8:2d:7d:64:
29:15:e7:b0:3d:9f:d7:e2:f5:f3:da:d2:44:9f:cd:
cd:33:65:d6:3d:7b:66:61:27:74:ba:96:fe:47:56:
0d:e1:d4:0e:60:e1:94:e6:9b:79:50:34:d0:f9:eb:
83:0e:82:94:39:e5:6c:46:ae:ad:89:9d:35:34:cd:
7c:96:bf:22:bb:73:69:1b:29:ed:78:40:9c:4f:9a:
e9:56:e4:29:00:6b:1f:fc:23:bd:9c:25:31:5a:35:
a3:20:d2:72:cf:96:fb:e9:e3:0b:ac:07:20:75:23:
08:9f:b1:87:92:a0:3f:b2:1d:c2:ca:1a:26:b8:be:
72:41:c9:6c:04:16:4e:f7:72:b8:90:c4:4e:ad:d5:
68:be:dd:91:6f:01:e4:d5:91:ae:a0:2b:7e:d9:2a:
af:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.208.0/22
IPv6:
2a03:7c80::/32
Signature Algorithm: sha256WithRSAEncryption
89:d0:f1:26:45:f6:cc:b0:7b:5a:62:32:34:17:52:1f:e0:cd:
ef:64:1e:65:aa:5f:51:4c:a0:09:1c:7a:c4:43:b6:eb:e7:52:
62:65:2d:d5:6a:29:5b:fb:df:7c:bf:b0:5c:17:fc:ef:6b:8f:
48:60:ca:a0:1a:f0:bb:62:91:2a:06:ec:40:46:1f:f8:99:c3:
2a:45:8e:7a:5f:2f:66:5b:e3:aa:5f:60:0e:71:49:18:d5:cb:
35:77:03:d4:42:70:e0:d3:aa:10:8c:96:34:b1:83:48:c9:1c:
03:14:f5:16:84:87:2c:a6:b2:16:42:36:ce:06:b2:29:f3:e2:
2e:b9:6a:a0:cf:0e:a0:90:d0:73:24:ad:23:da:91:59:e5:9f:
83:80:32:b5:6f:65:56:a7:69:0e:a2:e6:f2:b5:d3:68:43:a9:
39:32:f7:d8:68:93:5c:de:2c:5f:ef:64:fe:ee:99:c6:13:21:
a5:9e:8c:83:12:e5:c4:86:f9:bf:b9:26:5b:9b:cf:35:15:40:
a0:30:7d:e5:de:ed:d9:9e:66:16:bf:9c:83:c5:7b:a3:cf:51:
db:be:d7:7c:97:87:23:19:14:4d:2a:92:38:e7:07:6c:f7:15:
65:4a:48:10:6f:42:84:7c:83:19:1e:e2:87:b0:ce:da:48:0a:
6a:12:51:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:45:54 2025 by rpki-client