Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
File: rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer (raw, json)
Hash identifier: CHXMEPM4dYuf021fWxVclInRv1z6YoEReXdqcIBDCmE=
Subject key identifier: AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421444A4259EE50A75FF0CE0D723143B3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.153.100.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4a:42:59:ee:50:a7:5f:f0:ce:0d:72:31:43:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acebf396c9adf94f84dc901656e255ce6d50660c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:a1:5b:d3:20:bd:04:8d:4f:35:a5:bc:80:
79:b9:04:b0:f5:98:61:71:cb:51:97:9d:99:df:4c:
02:85:3f:fb:8d:7f:02:44:ac:6f:a6:c7:8a:bb:9c:
18:cd:a0:a8:af:59:34:fe:3f:7d:ca:28:7b:fd:78:
d2:3b:ee:c5:3b:d5:57:eb:fa:e1:81:46:e5:20:29:
0e:7d:51:85:32:fd:2a:a1:04:f1:a2:81:09:13:0f:
32:6e:f2:8e:fb:d7:c4:20:57:1d:6c:65:84:ce:db:
40:43:f4:60:12:3b:6d:b7:fa:e4:e0:e7:9d:c4:4a:
95:f5:34:97:34:5d:f3:d1:bf:90:8b:fe:61:05:46:
95:c9:ef:d7:f4:f9:4b:39:cd:2f:47:b5:66:3f:fa:
5d:58:f2:08:2a:65:31:8d:66:b8:f5:6a:32:21:82:
75:8f:5c:f0:2c:f4:95:39:75:14:d3:dd:cb:8f:31:
7d:84:e4:a9:b9:5c:8b:63:fa:c5:a5:54:65:44:e9:
f6:c9:bc:7b:fa:10:a7:ae:c5:ed:6d:be:ae:23:7e:
e6:23:c4:98:7b:dc:d7:83:cb:ec:c6:29:6a:8f:2e:
5d:d4:87:ce:66:29:69:e3:a2:c6:d9:ea:df:7d:42:
3d:83:8d:70:1a:4f:d7:c8:d9:f4:db:f5:31:5e:34:
18:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.100.0/24
Signature Algorithm: sha256WithRSAEncryption
37:74:bf:f4:70:41:3c:8c:15:13:b6:d6:0c:d9:d3:16:ad:2f:
70:1b:44:41:90:57:26:f6:70:7f:ca:9a:9b:82:ac:30:d5:66:
39:e5:e8:3b:29:f8:1f:9d:e8:7c:4a:6e:85:74:4e:ce:39:89:
5c:16:5c:7c:dd:75:9a:63:fb:39:07:f9:f9:b4:13:2e:31:22:
be:5a:81:3e:8a:cd:6e:60:bc:02:9a:47:c0:d7:47:54:d2:e4:
d5:c0:7f:01:b2:e6:a2:05:0c:90:41:24:4c:85:24:1f:a5:7b:
e5:61:4e:58:60:9f:66:05:c6:20:47:33:83:ce:fc:0c:a7:0a:
7d:7a:5b:86:ce:8b:53:5b:59:74:ec:bf:ca:ec:df:83:b2:1e:
bc:17:1f:c6:bd:11:a1:86:52:bf:7c:18:af:51:18:f6:90:a4:
4b:49:12:0a:c0:ec:a1:8d:bc:f7:8d:24:52:9a:c7:f9:10:ed:
6c:10:89:17:09:43:fd:fd:91:25:d3:6d:01:ec:68:52:53:22:
90:e5:07:02:ea:a9:13:f7:9f:ee:8d:ac:88:da:f9:e3:82:a0:
dc:e7:64:af:4f:60:74:a0:be:00:9e:eb:c6:12:19:d0:91:70:
f2:c4:2f:1d:25:e4:e6:9a:6f:db:2c:20:11:41:8f:1f:1c:c6:
d3:49:91:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:05 2025 by rpki-client