Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
File: vOyMcyqkPvCzm9NNFA_dOnOu23k.cer (raw, json)
Hash identifier: toory3NDoGzLIu9rnZuMWoBn2qbuLUca4qhpoeYGeiY=
Subject key identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C8F81179C824EC3390B478B7977B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 141.57.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8f:81:17:9c:82:4e:c3:39:0b:47:8b:79:77:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0a:21:c8:f2:29:d0:b4:b9:11:71:6b:2f:18:
2a:29:ce:2d:21:fa:d5:16:65:68:af:67:06:55:cf:
03:f8:d4:2c:35:59:8a:ea:7f:20:a3:33:97:71:73:
fd:4b:f9:56:8e:de:3c:db:88:57:c1:6e:cf:ae:ea:
e9:88:f9:49:68:d1:94:bd:ed:20:08:00:48:c7:8e:
fb:db:cc:d1:62:3c:2c:6b:a1:b8:e8:50:4b:b7:11:
08:24:5a:b4:96:67:5b:45:20:3b:1e:29:d7:2d:99:
75:ee:e6:05:f6:49:d9:1c:24:e8:19:30:c7:b5:14:
e4:ae:1a:bb:24:26:05:ca:6f:3a:d1:27:a0:83:be:
76:dd:77:ff:2b:35:11:de:4b:d8:e8:5a:53:ae:27:
50:25:03:02:08:3f:87:2d:75:0b:02:57:6b:00:38:
8a:e6:27:1d:a0:bd:c3:60:d0:90:53:ee:08:13:46:
7d:31:f5:58:f8:21:49:95:4c:e3:28:49:de:e4:65:
80:c1:9a:51:aa:68:22:c7:67:2f:85:af:9d:cf:db:
5b:40:cd:07:2e:e0:90:5b:80:22:ce:0a:7f:5e:68:
c7:35:2c:6b:53:e2:c1:bd:e6:ec:24:02:33:eb:44:
55:26:7f:27:be:c2:3b:b6:84:aa:07:9d:08:4c:ce:
85:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.57.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:25:72:e2:ed:2d:5e:75:1b:bb:95:b5:f2:6b:e5:63:54:7b:
12:08:7f:91:1c:7a:a9:dd:52:97:5c:80:6d:b4:df:b1:4f:3d:
77:68:75:bd:d7:04:41:fc:d4:a1:3e:a9:74:a2:2e:b5:91:da:
51:0c:37:db:bf:7f:09:50:d0:36:9a:3c:78:e8:70:7b:1a:4f:
09:5e:1f:62:e5:cc:7c:59:cc:f6:09:50:19:a1:d3:e6:3a:34:
da:d9:c6:a4:97:53:a5:0e:ef:4f:fb:d0:e5:92:a1:0a:c2:04:
07:62:36:7b:37:96:74:98:29:b6:0e:d5:91:5b:2a:a8:0f:d2:
bc:4f:9a:0c:d0:24:f2:11:88:af:cd:70:95:66:77:06:72:95:
96:30:21:92:5f:b7:a6:f3:b6:de:b3:02:1a:83:f7:39:ff:f1:
4e:e4:cc:2e:18:c0:33:bb:a4:ea:ce:0e:34:52:a4:2b:1c:6b:
fa:33:75:b6:84:75:0a:c5:aa:e3:64:33:a9:84:be:f8:7b:55:
6b:af:85:9c:60:ed:df:0f:b7:ee:87:a5:23:35:12:48:3c:1b:
a4:2e:a4:e6:24:96:a1:39:53:2e:27:ad:8b:33:51:a0:6e:b2:
f4:76:a4:b8:04:44:c3:a5:e6:d8:98:c8:4b:e0:cb:bd:c6:30:
ef:d5:93:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:37:02 2025 by rpki-client