Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
File: 1-MUB87-tSa1OVubkwY90Dt6gXSE.cer (raw, json)
Hash identifier: alTYmDQAqvfETQDIekGythUcJGkIfvyBhJx7qbkFtmc=
Subject key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C8C5BB9EF5B95BC35B560FF97448F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34805
IP: 193.238.170.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8c:5b:b9:ef:5b:95:bc:35:b5:60:ff:97:44:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:81:4e:a5:46:3c:25:24:e5:a2:67:71:49:7d:
e9:1f:93:d7:1d:31:61:6d:5b:7b:08:da:8c:79:82:
36:01:5a:9d:0e:b1:99:c1:1b:f6:16:08:7f:5b:d0:
54:aa:af:7d:48:89:96:da:2e:ae:6e:c0:0c:ca:ff:
3f:95:a4:a7:e0:a6:45:63:95:4c:90:78:23:f3:0c:
da:7c:cd:70:a4:2c:cf:8e:09:2e:30:4c:b4:9a:3a:
aa:70:94:90:2e:52:b2:d3:99:57:29:85:53:3a:cd:
33:6f:88:ee:b2:46:5b:c5:c8:69:fc:58:7d:42:10:
e2:2a:30:6c:c1:d6:a2:02:8d:62:cd:8c:6b:59:ab:
6b:d5:03:60:e3:a0:f0:94:16:44:da:18:2b:ef:64:
05:3b:6e:21:5b:fb:8a:11:97:48:d2:d4:e3:d6:82:
03:2f:64:c7:0e:b3:c7:a6:14:ca:7a:2e:23:a2:fb:
80:d4:e2:d5:1d:75:96:77:3a:12:da:fb:ca:47:e5:
26:87:41:6a:80:b7:ea:90:c5:86:e7:20:77:5e:39:
68:3f:60:72:4a:f7:a8:5d:b5:e8:34:76:59:dd:f8:
20:b3:5d:56:e7:59:e7:e8:c7:5e:d2:43:95:61:03:
54:83:d3:ce:3e:78:93:d6:41:80:7d:b3:7d:8e:24:
09:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.170.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34805
Signature Algorithm: sha256WithRSAEncryption
ae:c4:e2:4d:7e:f6:db:b4:78:05:71:5c:fb:b3:be:2d:bd:6e:
4f:2f:48:e1:01:15:82:94:6f:60:9d:e1:57:ce:93:b6:3a:92:
3a:fc:cd:fe:8c:eb:a7:40:3a:d7:46:1d:40:3f:e2:d9:4a:43:
9d:f0:51:1b:22:02:dc:93:ee:d2:e9:b8:09:66:b7:c4:eb:e3:
d3:4d:75:93:77:b4:a6:74:a7:5f:11:81:78:75:54:0c:d0:0c:
55:16:15:c8:80:74:a3:ac:d0:3e:3c:99:c1:de:4b:a1:07:66:
26:6e:70:00:a3:6e:0e:55:72:15:85:37:2b:8e:44:cc:13:b0:
48:29:1b:ec:67:06:25:2a:ab:ef:61:0e:3b:a4:97:29:ec:d7:
59:19:86:44:63:85:6d:dd:ef:98:6e:de:c5:fd:e2:98:5e:3e:
6a:76:aa:be:45:7a:5e:1e:07:4a:7c:9a:e6:35:a2:d3:88:2b:
43:40:84:9c:f2:8f:4b:07:e0:30:7f:90:39:a5:1e:6e:fe:a6:
09:b7:99:4f:d7:72:d2:0a:94:b9:35:5a:1a:1d:94:c1:cb:a0:
0c:a9:9f:50:31:ab:04:82:45:6d:e2:93:b6:06:c7:b9:84:ee:
06:93:92:41:6d:fb:77:1d:4a:a0:77:9d:cc:d7:b9:c0:ab:74:
0b:a3:03:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:25 2025 by rpki-client