Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
File: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer (raw, json)
Hash identifier: 5Pka4PDWoBa5sqH8KQQFqXl+OJVM5uBsWjL7yTc77tQ=
Subject key identifier: CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5EC94A0899302243CF79F170165C9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.201.128.0/22
IP: 195.93.158.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ec:94:a0:89:93:02:24:3c:f7:9f:17:01:65:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca2ded27751f291c0b55b79457207cb3a255197c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:39:3f:59:db:64:c6:25:86:3a:c6:d1:39:
e3:25:7f:b8:7a:d3:ef:8a:76:6c:63:5c:3f:9a:ff:
67:1a:ec:fb:44:b2:73:bb:85:6f:0d:cf:c3:5f:f4:
e2:f3:eb:cf:6d:5d:03:54:4c:e4:45:7c:09:02:ab:
c6:9c:0f:79:29:38:0e:db:5b:19:8c:f8:6c:6e:11:
a9:5f:93:36:ab:1e:bd:f5:63:9f:c2:e6:2b:44:24:
6c:7b:28:8c:2f:a2:9f:18:33:8b:77:a7:13:ac:65:
13:00:69:73:3e:e5:85:55:af:53:3d:ba:a8:1d:65:
eb:5d:b0:3c:49:9a:64:74:25:05:3d:bf:79:b1:05:
55:51:1e:7d:c4:a1:a4:6f:c8:19:8d:18:61:e6:af:
79:41:a1:40:e6:08:2d:72:77:4c:c3:62:0d:b8:3b:
46:2a:4d:52:22:02:f1:ac:44:e4:81:a4:1e:08:af:
10:e5:b1:da:37:55:21:6b:38:04:75:65:f4:d4:d4:
05:95:db:db:d7:45:cd:11:36:bc:34:71:36:df:20:
3f:cd:64:71:d1:95:fb:ef:49:93:54:5e:74:34:e7:
2e:da:91:e8:04:8b:f6:a8:2d:74:ab:c5:82:65:58:
93:14:b3:d0:e2:74:da:63:79:2b:32:e3:83:e5:0c:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.128.0/22
195.93.158.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:5c:c1:0f:0b:fd:46:13:13:75:cf:cc:40:3b:6c:f9:99:88:
ad:a1:79:7a:11:da:f0:38:a2:56:25:ef:ff:46:54:07:c2:e1:
ae:2d:b7:8a:85:8b:d2:d6:6c:b8:a6:0c:e6:05:55:5b:31:8c:
f4:65:f5:da:c4:37:53:cb:4d:80:e1:ce:6b:fa:5a:d1:4b:3f:
21:b9:c9:61:36:8a:5e:45:bd:00:a2:e6:d8:89:85:18:2e:5a:
92:38:bc:56:fd:64:8b:4d:cd:88:2c:24:38:29:54:0c:05:12:
0d:70:ff:0a:5e:88:e8:96:d6:4f:2b:96:e8:36:ee:0c:70:43:
85:44:79:4c:35:a8:25:91:06:4d:19:09:fe:13:c0:6f:d2:bc:
ee:28:13:76:40:52:dc:7f:a3:6f:16:bc:83:64:22:03:bb:fc:
19:a1:50:17:29:bb:5e:4f:e0:a4:3c:dd:84:23:a1:de:80:2b:
5c:1d:f6:df:96:f8:5f:db:35:bb:a8:85:14:e3:bd:aa:2b:e2:
17:c9:ee:20:8f:f2:89:20:c0:57:38:c2:50:a1:2f:21:db:bd:
ec:30:7f:c8:db:76:02:b9:88:de:b7:32:eb:a8:a4:69:af:62:
91:b2:ca:43:ad:64:38:53:09:09:3a:3b:8b:f6:8a:f7:c5:10:
e3:8f:f0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:02:47 2025 by rpki-client