Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
File: zABy2pgRQZPBBM4aYJ2SppdvnEA.cer (raw, json)
Hash identifier: lfH28fKjwPRk7e57yixTVYowTrLNELRjCpec4xX14Lc=
Subject key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B20260F6B8B5F653D21001DDC7A40E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.163.13.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:02:60:f6:b8:b5:f6:53:d2:10:01:dd:c7:a4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc0072da98114193c104ce1a609d92a6976f9c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:6e:34:a8:99:bf:37:08:ed:84:54:6b:c6:
d3:6a:91:1a:7e:28:f6:5b:19:16:f4:86:ed:12:40:
ec:eb:9a:53:6a:ed:d3:3c:17:82:e5:76:19:42:02:
76:08:34:db:08:7d:5f:46:ea:b2:60:b7:01:fe:16:
08:d4:b2:ef:08:70:d0:b1:f7:76:20:f1:b7:60:5b:
a4:f1:38:63:78:50:38:97:cd:6e:ca:f4:a8:85:a1:
af:ac:2a:9d:c0:66:31:07:a0:3a:bb:9e:31:27:5d:
fd:fb:6a:98:63:82:22:02:ae:40:9d:9d:90:88:0f:
59:28:1f:6c:70:dd:ab:ef:97:ad:cf:a6:1d:70:81:
a2:68:23:91:09:a8:97:fe:88:31:d5:7b:86:74:93:
f3:0b:7c:6a:28:ec:8c:ed:c8:f8:fe:63:ee:8d:b5:
ab:49:ac:8c:23:59:19:80:8c:11:75:58:8b:cd:9c:
f9:61:c3:12:c1:c4:0b:7c:55:5a:93:28:f8:f8:81:
02:94:a7:9e:e3:4b:ff:cf:d6:52:26:a5:e9:3f:80:
d3:51:d0:76:91:90:bf:c6:19:f1:ba:e2:91:9f:fc:
a2:51:7e:bd:70:2b:97:19:6e:ae:3d:f0:38:5a:76:
d1:47:75:86:73:51:87:ff:55:c8:0e:bf:1c:38:68:
d9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.13.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:7a:c2:c5:7e:de:84:35:f4:a1:27:37:7f:a3:60:61:6a:f9:
53:15:c9:1f:28:e3:87:3c:62:cc:cf:83:be:4d:af:75:53:1d:
58:f5:38:a6:bc:26:e9:08:5c:c3:66:bc:29:47:48:82:a7:00:
9d:4b:80:49:3e:12:04:58:cd:c4:3b:b5:a6:9d:0f:17:b0:6f:
ed:ca:a6:5c:e1:6a:da:d7:84:37:9e:8a:cf:b4:e2:19:05:d9:
8a:81:dd:ed:4e:06:d9:7e:f8:e6:8b:68:bc:bd:e8:37:0f:47:
4a:53:b6:aa:2a:a8:f1:ce:2a:c1:17:f7:7c:61:18:df:a5:b6:
20:e6:7a:2b:97:67:54:03:a4:1e:63:84:85:0b:3b:31:fd:95:
fe:e3:af:89:89:b4:6e:b3:75:03:7a:f3:0a:01:a0:23:03:e5:
62:46:da:3a:db:db:2b:e9:6f:36:ed:03:03:6b:65:15:d3:78:
a5:53:88:22:ed:0b:c8:b8:c0:14:b9:cc:4f:44:d0:56:99:74:
fb:37:bd:1c:0e:1d:bf:d1:78:a2:78:d1:8d:23:25:57:db:85:
a6:db:70:4e:5d:71:b9:11:d0:bd:1d:c5:0f:06:f2:48:36:76:
c3:b4:da:06:09:19:5c:6c:61:66:e4:17:1d:d3:b4:dd:e8:68:
c0:94:6b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:42 2025 by rpki-client