Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
File: 04SkGZfu6k0F_MfNQLEhE6W7aeg.cer (raw, json)
Hash identifier: EYeCNBytWJ/AsxfTWf/0qwI8Y6kmj/2IQTRsHa7d+Xg=
Subject key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942068608023AA7942400576710C53B491
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21222
IP: 193.8.16.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:60:80:23:aa:79:42:40:05:76:71:0c:53:b4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:97:4d:f7:1d:d6:1a:0b:c7:36:de:b3:cb:
fe:cd:df:b7:de:a4:6d:66:eb:0c:33:25:00:99:46:
75:4d:81:7a:e9:54:bd:0a:37:c8:30:98:7b:d0:7a:
60:98:5b:4a:b4:72:a0:82:75:c5:b4:6e:5a:00:1c:
6f:f0:43:0a:bb:37:1d:98:3a:84:49:25:06:2a:a9:
5f:07:4a:86:ee:52:83:7a:13:f6:fc:e1:9a:74:b4:
38:e5:1c:4a:fb:26:ec:12:3d:83:1b:d7:54:88:d5:
8e:3c:43:5d:51:55:40:37:10:33:7d:96:51:d2:15:
5a:28:f4:05:f9:d3:a9:88:2f:71:d5:4d:30:7d:3d:
48:f6:29:1a:88:f4:f1:e1:cc:4e:a2:8f:0c:03:05:
d4:82:99:f3:ef:7d:fc:7e:59:60:18:6f:b3:63:2d:
78:4b:3b:3e:2d:b8:d8:34:08:39:00:df:24:a9:98:
eb:8e:83:8f:9a:d8:af:09:6d:49:d1:e0:62:fd:e9:
d4:ec:a9:52:f8:15:37:0e:59:fd:4d:02:58:9c:0c:
77:ce:4b:20:93:0b:80:77:ff:34:bd:49:f2:fb:05:
1b:bc:31:bf:e3:25:11:79:2c:75:ff:df:2c:38:76:
9f:c6:31:72:30:24:47:0b:14:37:06:66:0b:d0:09:
d8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.16.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21222
Signature Algorithm: sha256WithRSAEncryption
2d:ce:80:62:61:2f:75:20:89:36:ee:97:18:95:19:49:a3:ea:
cc:c1:4a:47:82:36:ce:35:61:53:63:b4:10:ec:03:6e:99:c3:
f9:99:c9:1b:82:2e:c5:7e:77:49:bf:0a:0e:d7:bb:a5:1c:7b:
d0:ba:14:67:b2:96:5f:90:5f:34:97:db:a9:c4:bb:42:ad:5b:
81:c6:43:e4:e6:96:6e:ae:ba:a7:d6:18:33:ce:a7:b4:b0:84:
7a:33:93:38:30:ff:5e:88:ae:48:c0:f7:90:d5:19:35:f8:16:
f2:cd:c0:96:c3:76:8e:48:7d:2b:de:9a:00:dc:60:23:c3:0a:
ba:9e:ff:e9:41:b8:77:50:66:35:3e:2e:25:3c:c2:08:38:3a:
55:c4:f4:21:56:f2:05:72:3d:72:fb:b3:60:3b:7d:f9:c5:21:
9d:ae:0d:f2:6a:f3:2f:bf:3b:1b:b8:c6:23:68:11:ad:d7:48:
26:56:2c:1d:f2:b4:84:ab:97:1c:69:8d:6f:83:1b:39:cc:2f:
37:ac:73:3a:82:54:67:cf:f3:92:8d:a3:c9:6a:36:c9:27:4e:
1a:88:d9:d9:ad:90:cf:a3:1b:6c:ff:c7:51:be:d3:63:6d:48:
30:77:a2:bd:20:76:d3:2c:26:89:37:51:75:24:37:a0:c7:fe:
20:fe:fe:73
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZQgaGCAI6p5QkAFdnEMU7SRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzg0YTQxOTk3ZWVlYTRkMDVmY2M3Y2Q0MGIxMjExM2E1YmI2OWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsWXTfcd1hoLxzbes8v+zd+33qRt
ZusMMyUAmUZ1TYF66VS9CjfIMJh70HpgmFtKtHKggnXFtG5aABxv8EMKuzcdmDqE
SSUGKqlfB0qG7lKDehP2/OGadLQ45RxK+ybsEj2DG9dUiNWOPENdUVVANxAzfZZR
0hVaKPQF+dOpiC9x1U0wfT1I9ikaiPTx4cxOoo8MAwXUgpnz7338fllgGG+zYy14
Szs+LbjYNAg5AN8kqZjrjoOPmtivCW1J0eBi/enU7KlS+BU3Dln9TQJYnAx3zksg
kwuAd/80vUny+wUbvDG/4yUReSx1/98sOHafxjFyMCRHCxQ3BmYL0AnY/wIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFNOEpBmX7upNBfzHzUCxIROlu2noMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwLzQ5MDZm
Zi05ZTIwLTQxMTgtOWFhZS1mNmQwZmY0NTg2NDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvNDkwNmZm
LTllMjAtNDExOC05YWFlLWY2ZDBmZjQ1ODY0OC8xLzA0U2tHWmZ1NmswRl9NZk5R
TEVoRTZXN2FlZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQEwQgQMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AlLmMA0GCSqGSIb3DQEBCwUAA4IBAQAtzoBiYS91IIk27pcYlRlJo+rMwUpHgjbO
NWFTY7QQ7ANumcP5mckbgi7FfndJvwoO17ulHHvQuhRnspZfkF80l9upxLtCrVuB
xkPk5pZurrqn1hgzzqe0sIR6M5M4MP9eiK5IwPeQ1Rk1+BbyzcCWw3aOSH0r3poA
3GAjwwq6nv/pQbh3UGY1Pi4lPMIIODpVxPQhVvIFcj1y+7NgO335xSGdrg3yavMv
vzsbuMYjaBGt10gmViwd8rSEq5ccaY1vgxs5zC83rHM6glRnz/OSjaPJajbJJ04a
iNnZrZDPoxts/8dRvtNjbUgwd6K9IHbTLCaJN1F1JDegx/4g/v5z
-----END CERTIFICATE-----
Generated at Tue Apr 22 12:21:53 2025 by rpki-client