Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6_WDiMYxyXfqUfyttQzSCnSS9ec.cer
File: 6_WDiMYxyXfqUfyttQzSCnSS9ec.cer (raw, json)
Hash identifier: vBm2Yhb+4/0z3dN36QLrzqelCShc8Et54rI08VHhpS8=
Subject key identifier: EB:F5:83:88:C6:31:C9:77:EA:51:FC:AD:B5:0C:D2:0A:74:92:F5:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942520A88984732F5EB771407D3946E348
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213270
IP: 37.200.86.0/24
IP: 2a02:f980::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:a8:89:84:73:2f:5e:b7:71:40:7d:39:46:e3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebf58388c631c977ea51fcadb50cd20a7492f5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9a:5b:88:7a:27:f8:04:20:0e:80:45:ac:d2:
26:38:1f:09:3a:c5:74:f5:0d:c9:28:3f:bf:71:b3:
1e:81:e4:e2:55:e7:50:7f:44:fb:ba:9d:ad:2b:aa:
53:f0:ef:b3:37:0d:2d:59:5d:37:18:8d:6a:43:24:
3b:60:08:0a:0d:3c:6d:af:c2:68:5f:c5:bd:a4:23:
d7:b4:15:17:db:41:f9:7b:82:b0:db:9f:03:36:68:
5b:1a:51:ad:95:e1:0b:af:d8:2f:48:59:3f:10:9a:
4c:13:db:2c:b6:6b:4c:65:48:a8:6c:6e:41:46:6c:
42:88:a9:20:88:e4:cf:f6:76:2f:1b:48:cd:6a:be:
bb:a2:d4:cf:9b:c0:05:34:1d:54:0f:8c:b7:47:9c:
cb:6f:9b:6e:58:c1:77:0d:e9:04:84:1c:01:a2:54:
9c:a2:32:88:b0:25:07:a7:3f:29:ca:af:44:ec:67:
42:90:b1:ef:32:89:6f:05:7b:76:a8:0d:a8:33:8d:
48:45:ba:79:f5:8a:65:0d:34:2a:17:ad:fd:8e:49:
84:4e:e4:24:f8:2f:0b:b9:96:8c:20:44:82:1c:83:
d5:8b:82:93:31:c0:00:1d:91:aa:ad:f1:de:c1:57:
71:c6:ed:3f:39:47:ce:bd:aa:97:e7:2e:db:9e:19:
e3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F5:83:88:C6:31:C9:77:EA:51:FC:AD:B5:0C:D2:0A:74:92:F5:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.200.86.0/24
IPv6:
2a02:f980::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213270
Signature Algorithm: sha256WithRSAEncryption
35:02:ff:88:98:4b:d7:c6:da:86:16:71:f9:6d:46:51:47:e4:
b4:72:7a:22:be:c0:62:53:23:21:2e:cf:23:ad:1e:61:ee:40:
58:11:08:4c:31:94:b2:a5:87:e1:a5:41:9f:13:eb:59:1b:d3:
06:f7:51:f5:6b:09:1d:e1:19:c2:33:64:5b:66:ef:5f:5b:bc:
f3:37:0d:e5:e1:77:40:92:3d:bc:aa:c7:9d:c3:c2:3d:44:57:
66:ae:68:d5:c8:eb:a5:05:d2:c3:39:67:18:56:bf:7f:b3:8c:
97:87:76:f1:7d:c3:9a:9e:fa:5b:a4:ca:ff:26:94:e8:8f:d3:
8b:0b:56:0c:c1:7e:e6:0f:2f:f9:4c:43:ff:f8:51:15:60:5e:
41:b7:df:e6:00:a4:90:79:b6:34:c3:25:1f:80:b3:0c:1d:85:
f0:79:29:a8:4b:f9:af:25:ec:0a:d0:73:e7:b8:ab:3f:b6:19:
8e:37:14:0d:51:b0:a0:93:34:b9:83:ef:0a:34:4c:82:8c:87:
67:52:3e:72:62:f4:b3:40:80:e0:76:91:2a:d2:1d:47:72:1a:
e3:32:c7:b8:48:6a:a8:c4:bb:85:1c:a2:45:5f:c3:ee:10:fa:
45:7e:5f:00:87:39:09:29:9e:b2:f7:12:ea:57:bf:ac:1b:02:
ed:52:33:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:22:16 2025 by rpki-client