Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
File: sL0oE0WvbNVBVNTP908ZWjiP_8E.cer (raw, json)
Hash identifier: nX8eQ+XKeS/VOR5OhzEPe0vpNAOjac0INCDO7bjbe5I=
Subject key identifier: B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC486A7DA4C46310C162CFD3D73A92
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.93.73.0 -- 194.93.75.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:48:6a:7d:a4:c4:63:10:c1:62:cf:d3:d7:3a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4d:26:8a:4e:de:b2:13:ff:6a:ce:d3:7e:cf:
95:3d:1f:46:9b:7d:90:72:4d:d1:89:71:0b:b7:66:
ba:b4:07:76:c5:33:3f:c6:23:7d:53:6c:90:63:d8:
05:d6:ec:17:94:21:a2:c0:d5:55:64:c3:2a:f0:77:
6f:d4:ed:b0:43:44:21:a7:ac:ab:c1:cb:3f:4a:82:
ee:64:2b:21:95:8b:c2:6d:90:34:6f:19:6c:f7:b5:
99:79:2a:c0:25:a8:36:bb:df:e4:0c:77:13:b3:81:
b6:09:49:4d:09:f2:15:74:ea:df:d2:a6:97:ee:63:
7f:2e:2e:31:c4:93:60:4d:e9:ea:30:9c:a0:f8:51:
5d:12:3e:57:da:e2:21:fc:8a:46:cf:ee:0d:0d:62:
61:ad:75:c0:45:c4:9e:a1:9e:6b:6c:12:99:ae:8c:
9a:32:8f:e5:b3:6f:7c:2f:56:79:a4:40:9b:e6:9e:
b2:07:90:d0:88:42:cc:ed:4d:84:f9:cd:fa:ac:cd:
63:13:f3:6e:26:42:88:87:1e:cb:7e:3b:44:41:da:
5f:c8:7b:b2:4d:63:1e:7e:c0:27:14:7a:35:25:5b:
50:d6:88:34:d0:b0:0e:39:8b:df:fa:4d:1e:3f:c7:
fb:b0:1c:4c:65:53:6c:ab:84:9f:3f:ac:5e:06:4d:
4f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.73.0-194.93.75.255
Signature Algorithm: sha256WithRSAEncryption
86:a3:5a:7c:89:b2:3a:72:9c:6d:b3:fc:bb:3c:3b:9f:c6:5e:
2b:1c:cb:13:03:13:43:2f:2c:12:09:5d:ef:b4:a1:81:49:0a:
dd:3a:d9:d9:17:40:f4:f6:d6:e1:7e:88:4e:bb:d5:c5:61:09:
4b:11:ac:6e:b1:88:35:64:ef:98:dc:6e:af:07:aa:41:d6:d0:
31:cf:86:bc:5b:db:93:a6:dc:89:c5:3c:a7:e1:ab:30:76:6d:
58:bf:02:ae:a1:5b:dc:97:7b:50:8f:c5:23:bb:ac:44:ec:d0:
c4:15:a3:06:df:5f:5f:36:34:95:58:a3:7c:26:00:6b:52:a4:
42:a0:98:15:bb:0d:31:64:99:88:09:04:57:29:56:2b:95:93:
40:6e:d3:ee:8e:9a:1f:d6:84:02:08:e6:b8:bb:5f:29:ec:82:
e4:63:da:4d:d2:cb:75:5e:ae:7a:58:25:52:23:8b:dc:08:a3:
5c:36:e3:11:f1:4f:d9:9d:31:26:fc:58:bf:1c:e6:96:43:0e:
f9:95:42:d4:81:05:53:33:ae:f2:ca:19:4f:fe:9d:84:cd:15:
7d:e7:bb:3d:61:2f:dd:98:86:36:49:35:4b:10:cc:a6:fb:71:
24:43:8d:a6:58:70:09:2e:bc:43:f2:e3:01:94:0b:15:33:c6:
ab:0d:2c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:51:59 2025 by rpki-client