Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
File: vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer (raw, json)
Hash identifier: mrH1AT5GeJPrb8UV429VOkh/MPBWvD6TgL3vYc0P9q4=
Subject key identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3E2AC15F683416732E3D23D8A7DD0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 192.109.199.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e2:ac:15:f6:83:41:67:32:e3:d2:3d:8a:7d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8e:79:b8:d6:97:17:82:28:73:d8:60:7a:9a:
a2:58:7a:c5:84:e4:02:4a:d1:5c:85:d0:5d:20:24:
a5:dc:0e:0a:58:51:31:70:32:5e:44:07:11:1a:f2:
4f:2a:06:c9:64:65:da:bf:d9:b4:56:bd:57:56:aa:
a9:66:ab:1e:4c:87:f3:a3:0b:23:18:57:03:03:6d:
db:8d:41:35:9f:e0:14:cb:40:dc:bd:33:ae:e6:17:
b6:18:1e:dc:59:38:1c:91:ae:09:fb:25:23:77:f2:
43:ba:87:7a:8f:88:9b:1a:7a:66:c5:24:ff:e6:34:
63:8f:0a:27:03:07:16:c2:97:6b:aa:1d:0f:59:2b:
6a:f2:86:dc:88:00:e1:8a:f1:31:0b:e8:3b:39:68:
ba:97:a0:99:72:9e:ee:43:1c:b6:8b:92:09:1a:8c:
53:5b:d8:55:c0:b2:60:d4:4c:76:6f:41:d0:0c:d5:
57:17:65:ab:64:aa:7b:c5:9d:26:ee:24:9e:8c:bc:
e6:c9:28:26:39:ea:b7:be:c4:8c:e0:09:80:e1:e5:
59:ea:75:b4:32:53:37:c1:11:ff:67:b7:3a:10:48:
30:8b:7a:cb:66:63:fa:2a:cd:54:4f:5f:a7:26:96:
7d:5c:4b:23:3f:0b:a6:83:6a:14:53:a6:84:f1:08:
2d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.199.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:22:a0:4e:da:d1:69:68:5b:5c:d2:cc:7b:99:00:63:14:a2:
9d:0c:04:d0:bd:c0:fd:d4:e9:1e:8f:4b:7f:77:99:d9:34:7f:
9d:0a:01:c6:50:05:db:e3:2b:bf:35:38:7f:48:e4:c8:8b:6a:
e9:c6:62:e9:31:04:63:c7:21:ba:9b:ba:f1:a3:d2:71:ac:26:
b5:dd:40:10:59:91:32:f8:79:d6:ec:64:69:71:65:cb:41:a4:
f2:5c:da:33:fd:28:4e:99:fe:9b:4d:40:7c:cd:22:63:4d:da:
09:b2:d1:1d:ae:ab:52:09:c3:06:e9:b9:f2:f2:1f:b9:a1:21:
32:40:36:b4:e1:64:84:aa:c3:c6:f1:8d:11:90:30:ad:f9:af:
64:07:29:c9:9b:9e:e1:a6:14:97:ff:aa:7f:a4:e3:54:03:ec:
43:3d:a7:2a:2f:d9:54:ee:32:91:97:d3:42:3b:b8:d0:c0:73:
0b:99:47:8d:45:ab:62:79:61:18:89:5c:5d:22:1b:74:54:c3:
f6:6e:21:09:ec:11:6a:2e:65:32:64:bd:ba:65:77:91:6b:d4:
62:92:c5:8a:cf:11:e5:b6:7f:e5:44:29:d2:45:3a:a8:4a:8f:
f2:90:14:80:b0:55:ba:e7:eb:c8:58:a4:95:9e:63:0c:26:6c:
fc:53:86:1a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQks+KsFfaDQWcy49I9in3QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDY4YzFkYWQ5MWE0MTAxYzcxNTNjMGY2ZDAxNTYyMzhhZDc0NmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY55uNaXF4Ioc9hgepqiWHrFhOQC
StFchdBdICSl3A4KWFExcDJeRAcRGvJPKgbJZGXav9m0Vr1XVqqpZqseTIfzowsj
GFcDA23bjUE1n+AUy0DcvTOu5he2GB7cWTgcka4J+yUjd/JDuod6j4ibGnpmxST/
5jRjjwonAwcWwpdrqh0PWStq8obciADhivExC+g7OWi6l6CZcp7uQxy2i5IJGoxT
W9hVwLJg1Ex2b0HQDNVXF2WrZKp7xZ0m7iSejLzmySgmOeq3vsSM4AmA4eVZ6nW0
MlM3wRH/Z7c6EEgwi3rLZmP6Ks1UT1+nJpZ9XEsjPwumg2oUU6aE8QgtsQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFL1owdrZGkEBxxU8D20BViOK10a7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiLzRmNGVm
Zi1hZjU0LTRkYjAtOTFjZC0xMzY5Y2VmN2E0Y2EvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvNGY0ZWZm
LWFmNTQtNGRiMC05MWNkLTEzNjljZWY3YTRjYS8xL3ZXakIydGthUVFISEZUd1Bi
UUZXSTRyWFJycy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwG3HMA0GCSqGSIb3DQEBCwUAA4IBAQAOIqBO
2tFpaFtc0sx7mQBjFKKdDATQvcD91Okej0t/d5nZNH+dCgHGUAXb4yu/NTh/SOTI
i2rpxmLpMQRjxyG6m7rxo9JxrCa13UAQWZEy+HnW7GRpcWXLQaTyXNoz/ShOmf6b
TUB8zSJjTdoJstEdrqtSCcMG6bny8h+5oSEyQDa04WSEqsPG8Y0RkDCt+a9kBynJ
m57hphSX/6p/pONUA+xDPacqL9lU7jKRl9NCO7jQwHMLmUeNRatieWEYiVxdIht0
VMP2biEJ7BFqLmUyZL26ZXeRa9RiksWKzxHltn/lRCnSRTqoSo/ykBSAsFW65+vI
WKSVnmMMJmz8U4Ya
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:03 2025 by rpki-client