Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
File: vDWQTiTbDpkElaNEXnfRE27WGNc.cer (raw, json)
Hash identifier: f+1BMY/d14NXvrcYDd/KWktSUqdthJvegcrWSa52kKI=
Subject key identifier: BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D96D7D15FFABA514CB4B34FD59D836
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 213.165.32.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:6d:7d:15:ff:ab:a5:14:cb:4b:34:fd:59:d8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc35904e24db0e990495a3445e77d1136ed618d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:82:0c:28:eb:f3:c7:8b:e8:55:7a:2d:74:
f1:4d:fe:e1:9a:e5:8b:73:31:e9:fd:88:18:d1:41:
7c:33:8f:68:3d:c9:4e:eb:85:c0:23:52:fd:97:38:
7b:92:5e:34:19:d1:c8:49:85:84:3b:2f:23:3e:53:
83:e6:66:18:cb:34:4a:c3:ac:d0:f6:23:ec:3c:07:
f2:2c:30:b5:a0:e1:11:3d:b2:9e:9a:e3:35:0b:3a:
fb:a9:9c:a4:c7:d4:b3:4c:51:54:ed:bb:2a:2d:b0:
6d:82:26:45:84:3d:d2:35:51:46:1e:de:18:83:9d:
a4:ba:d7:b9:21:be:14:76:e7:15:97:aa:f9:d8:b8:
62:03:5f:c3:66:d5:95:ac:9b:96:51:37:8e:0f:05:
22:1a:45:03:c8:1c:4f:c1:e3:39:30:58:5b:b4:0b:
19:94:10:d1:61:19:41:d1:4f:f3:cd:05:42:0d:4d:
1c:de:e1:db:8b:c0:63:b7:0a:6f:6f:43:2d:87:1a:
8b:d8:22:10:d4:33:93:1b:d1:d8:d3:3a:db:f1:bb:
6a:f1:2f:f5:e2:fc:df:59:ca:82:fc:1c:a1:97:7a:
5a:11:97:e1:27:68:a1:0d:e7:b3:e1:f3:fe:ea:f5:
0b:5c:26:5b:13:62:37:f3:91:54:7a:cc:e9:e6:6c:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.165.32.0/19
Signature Algorithm: sha256WithRSAEncryption
6b:5b:43:ad:4f:8d:ff:2b:f8:80:ed:79:48:0a:b3:a7:7a:fe:
1d:b7:58:06:c9:10:fe:50:90:0a:2d:a7:93:03:eb:23:65:c9:
75:16:2f:70:81:d1:03:ce:dc:f8:80:a2:ef:dd:90:1e:43:8f:
75:6d:dd:97:e4:11:79:53:d6:08:79:ca:1e:07:f4:c9:f5:cd:
89:2d:14:72:86:ee:7e:e9:49:72:46:38:72:3d:f8:3e:76:8e:
26:52:b5:58:17:b7:b8:43:9c:f3:d3:a4:b5:58:2f:1d:71:17:
0d:d8:09:2c:f3:4c:bd:04:a9:24:af:18:55:74:ff:bc:c6:ac:
83:86:83:df:0c:af:9b:19:7a:9f:f7:96:87:5b:a7:cb:7b:5b:
76:13:4c:50:ae:f1:32:19:38:a6:36:5f:08:86:ff:fa:37:8e:
66:25:58:71:b2:1d:ff:49:2d:e9:b9:5b:75:76:a3:75:9c:98:
85:df:86:b0:1e:5e:b5:6d:3d:b0:3a:a8:d4:d9:ff:6b:d2:2c:
af:ea:f1:9d:6c:d3:63:1d:c6:fa:6d:dc:e2:bd:43:a3:50:de:
ca:2c:25:03:a2:3e:c0:b9:9d:69:3a:10:91:9a:cc:f0:1a:b7:
a3:c6:43:27:98:d8:5c:69:b1:33:d8:2b:cc:05:c5:ee:ba:e4:
fc:8e:a5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:47:41 2025 by rpki-client