Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer
File: vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer (raw, json)
Hash identifier: S2hje6F+LmIeaIWJuWjxtD0+G0trmtur5EFQhHUPsPk=
Subject key identifier: BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274815087C3EC2D84A3B2342B21E4ED6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203785
IP: 213.134.1.0/24
IP: 2a13:4b80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:15:08:7c:3e:c2:d8:4a:3b:23:42:b2:1e:4e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bce75c43a41501d35417ae813be29f4227fb2dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8c:24:59:d3:54:94:cd:43:a3:cd:4c:cf:23:
2c:b0:e4:09:f8:08:a7:0c:af:50:1e:9f:67:fc:96:
33:b3:a2:a6:91:dc:9c:fa:64:45:d1:50:f5:9d:1a:
91:5d:07:38:33:28:93:22:8a:f6:39:d5:ee:04:a6:
45:dd:35:fd:78:e2:fb:5c:02:5e:6e:3e:ea:82:15:
5f:4c:2d:57:94:74:37:a0:f9:54:2e:33:62:f1:7c:
6b:3e:e5:40:ad:62:3e:16:6c:34:e0:4a:47:60:f0:
8c:e6:17:20:f2:83:90:ad:12:19:85:af:87:28:a5:
60:e6:b8:f8:2b:11:81:bd:d9:9f:39:66:84:23:ff:
99:b2:b3:11:81:dd:7e:73:28:6e:a2:72:bd:6b:87:
57:99:60:0c:f9:72:8d:21:06:2f:68:4d:90:aa:87:
3d:97:bd:ed:0d:8c:65:e2:de:21:0c:86:fa:8e:1b:
f4:15:5e:65:10:35:c5:0b:47:40:74:49:0f:45:e6:
9d:86:f8:3c:7b:e3:cc:0d:b3:a9:e9:91:9a:96:ac:
67:89:4e:ed:8d:0f:11:eb:49:eb:e3:44:0c:87:6e:
56:52:f5:50:6f:bd:7a:95:1f:86:83:15:72:61:2e:
fe:fe:83:4e:68:ed:8e:5c:6d:cb:d1:ee:57:18:03:
fe:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.1.0/24
IPv6:
2a13:4b80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203785
Signature Algorithm: sha256WithRSAEncryption
6f:b3:ce:16:a4:53:38:f4:db:66:5a:b1:6d:5c:42:78:71:73:
d7:bd:10:06:c6:1a:b8:30:fc:17:56:78:36:15:fb:8c:5d:c5:
8f:c7:09:22:45:fb:6c:c9:93:b3:13:16:f1:01:2b:b5:f1:03:
a1:ef:34:9f:b9:31:a0:12:9d:4d:b5:6f:c8:3c:d3:3f:39:86:
6d:f1:97:e8:a2:8c:d3:ea:8a:21:b8:eb:bf:fc:4b:99:ea:78:
9d:de:5c:23:0b:27:be:62:3d:9b:38:a3:05:7c:01:04:e1:7d:
3e:16:79:a8:a4:41:1f:7c:e7:c5:11:a6:9b:75:73:33:71:d4:
e2:4d:bb:e8:c1:df:58:d7:6e:75:22:a6:4f:79:23:f1:db:38:
83:47:75:92:eb:16:77:f0:cc:2b:8a:a7:56:22:c7:b1:6a:32:
a7:66:7e:f7:01:87:7d:d9:59:42:a4:77:d0:2f:4b:df:c4:21:
a0:4c:07:3f:a0:4b:b9:f8:19:fe:4b:d3:d8:12:e1:0f:4e:c4:
5b:d4:4b:03:1d:e5:e0:b1:f2:25:32:87:46:2e:b2:de:2b:e1:
25:23:94:f3:bb:a6:59:a0:b7:d8:e8:6a:23:51:c9:c8:9b:64:
30:d1:95:55:52:e4:cc:1b:3f:ab:54:35:f2:99:71:f4:e6:0f:
fd:5a:98:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:57:08 2025 by rpki-client