Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
File: suwbpoVLv1vD7VVP9_7zul_ky1E.cer (raw, json)
Hash identifier: 09birpPdMQN2c9xLIP3mcfoQMTCZ6WqE9Y459n9xSXw=
Subject key identifier: B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423698CF1C1CF8737E5648864192D466B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 80.84.192.0/19
IP: 185.48.208.0/22
IP: 2a04:a080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:8c:f1:c1:cf:87:37:e5:64:88:64:19:2d:46:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:71:42:54:19:98:06:8f:70:34:1d:9e:b7:a6:
41:34:05:25:72:a0:67:2d:50:bb:95:7c:3b:d3:bc:
95:c2:45:ce:70:77:24:62:65:5f:7b:fe:0c:09:21:
ea:1c:5a:29:f0:56:9e:c5:97:96:68:32:bc:07:19:
3f:49:55:c3:b4:f5:c3:75:13:0d:32:81:93:20:68:
f1:6b:d1:47:e5:a1:0a:7b:bb:e8:c3:ef:59:36:91:
e7:c0:1c:8e:28:5f:5a:e0:5d:3f:26:7f:6e:58:c5:
ef:e8:ef:f7:1e:57:fb:48:82:da:da:7b:36:68:5e:
19:56:31:1f:de:98:90:a6:e6:7f:66:07:b3:a3:b2:
43:27:b4:d8:6f:dc:7e:08:96:96:4f:2d:63:cc:57:
91:d1:33:b6:24:e8:d4:7e:e4:f5:c4:3e:f4:c2:37:
7e:94:6a:e6:4b:5a:eb:b5:c2:05:99:32:8b:3d:4f:
ed:8f:41:5e:da:06:c8:f4:5f:ba:3e:51:3f:33:57:
c8:20:bd:52:50:f5:50:17:dc:9b:9f:7e:d9:4e:c0:
9a:0d:f2:41:58:34:8e:ab:a4:33:3a:6d:bc:9a:27:
b3:4b:a0:00:cf:6a:83:03:32:80:85:8f:35:60:a4:
8d:b7:e3:eb:58:41:ae:6c:b0:0e:8b:f9:17:10:25:
71:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.192.0/19
185.48.208.0/22
IPv6:
2a04:a080::/29
Signature Algorithm: sha256WithRSAEncryption
7a:66:15:c8:f6:2f:d4:7b:05:8e:df:3d:69:ad:72:b0:4e:66:
28:ff:82:c5:43:1c:54:20:b4:e2:14:3c:dc:59:15:80:2e:7a:
e8:3f:bb:99:6a:ee:2d:7a:a9:63:46:66:3e:50:9a:40:a9:3d:
f3:5b:03:df:7b:35:5b:97:61:21:a9:42:f6:f2:93:c8:23:95:
e8:16:d4:b7:0a:7e:0d:32:62:51:8b:f0:3f:68:02:f2:f2:7f:
0f:da:9d:af:50:50:26:8c:99:b5:d1:28:cd:54:05:fc:0c:fb:
5e:67:02:48:82:2d:41:4a:56:a4:16:98:75:23:99:c9:0e:b8:
ca:e3:f0:b7:1e:d7:01:86:d9:33:b3:65:1b:8a:a3:bd:58:c3:
37:27:a7:d8:50:97:e5:77:b4:ce:e5:5a:97:5d:56:74:b3:80:
3a:3f:c3:85:24:56:01:11:66:75:b4:b1:22:bc:c7:37:8d:3f:
a3:55:0c:fe:1b:c7:cf:8d:6d:76:06:fc:5f:d4:1e:bf:11:99:
c4:54:fb:70:f4:ea:32:8f:e0:a0:8b:dc:f1:37:11:41:4f:97:
a0:a5:40:89:14:d2:a4:b3:00:ff:7e:e8:32:cf:ba:9b:a6:16:
97:d7:4f:84:83:f3:d0:b8:04:7d:42:0d:d7:ab:fc:4e:51:8f:
9b:6f:a8:5e
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZQjaYzxwc+HN+VkiGQZLUZrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmVjMWJhNjg1NGJiZjViYzNlZDU1NGZmN2ZlZjNiYTVmZTRjYjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXFCVBmYBo9wNB2et6ZBNAUlcqBn
LVC7lXw707yVwkXOcHckYmVfe/4MCSHqHFop8FaexZeWaDK8Bxk/SVXDtPXDdRMN
MoGTIGjxa9FH5aEKe7vow+9ZNpHnwByOKF9a4F0/Jn9uWMXv6O/3Hlf7SILa2ns2
aF4ZVjEf3piQpuZ/Zgezo7JDJ7TYb9x+CJaWTy1jzFeR0TO2JOjUfuT1xD70wjd+
lGrmS1rrtcIFmTKLPU/tj0Fe2gbI9F+6PlE/M1fIIL1SUPVQF9ybn37ZTsCaDfJB
WDSOq6QzOm28miezS6AAz2qDAzKAhY81YKSNt+PrWEGubLAOi/kXECVxEwIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFLLsG6aFS79bw+1VT/f+87pf5MtRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiLzUyNzll
Zi1hMWM5LTRkYTItYTFjNS0xZDhkOTMzZDZjMDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvNTI3OWVm
LWExYzktNGRhMi1hMWM1LTFkOGQ5MzNkNmMwMC8xL3N1d2Jwb1ZMdjF2RDdWVlA5
Xzd6dWxfa3kxRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQFUFTAAwQCuTDQMA0EAgACMAcDBQMqBKCAMA0G
CSqGSIb3DQEBCwUAA4IBAQB6ZhXI9i/UewWO3z1prXKwTmYo/4LFQxxUILTiFDzc
WRWALnroP7uZau4teqljRmY+UJpAqT3zWwPfezVbl2EhqUL28pPII5XoFtS3Cn4N
MmJRi/A/aALy8n8P2p2vUFAmjJm10SjNVAX8DPteZwJIgi1BSlakFph1I5nJDrjK
4/C3HtcBhtkzs2UbiqO9WMM3J6fYUJfld7TO5VqXXVZ0s4A6P8OFJFYBEWZ1tLEi
vMc3jT+jVQz+G8fPjW12Bvxf1B6/EZnEVPtw9Ooyj+Cgi9zxNxFBT5egpUCJFNKk
swD/fugyz7qbphaX10+Eg/PQuAR9Qg3Xq/xOUY+bb6he
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:22 2025 by rpki-client