Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
File: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer (raw, json)
Hash identifier: fSca6u7FA7Qci4JQvKVzUMqZ0rhVYN0McElSPCLmFZo=
Subject key identifier: EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E432355D692582C3AAA8B34BC9096
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8253
IP: 192.108.114.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:43:23:55:d6:92:58:2c:3a:aa:8b:34:bc:90:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee82395001b03c663509909979dfb78445b3d9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:9c:7a:bc:a3:f2:fb:dd:d6:fb:64:7d:16:
c5:4c:7a:e6:e0:e6:9b:b7:f1:c9:3b:4b:19:85:16:
c7:9c:0d:e1:2b:6c:59:2c:c3:62:1a:59:f5:a7:ed:
4c:05:cf:f3:e9:0a:81:2b:c2:c7:00:93:05:8f:97:
e6:d9:f8:7f:16:e9:12:a2:50:ea:e1:cd:70:59:7f:
66:a3:c2:3e:7a:ed:13:88:d3:c2:a0:e0:bb:bd:68:
04:23:a4:3e:82:fc:ac:72:79:8f:03:87:7f:ec:33:
b8:72:82:95:4d:5a:c3:c8:a6:76:ea:62:b9:a9:b2:
45:20:48:71:08:eb:ad:6e:5a:16:d0:c5:92:2c:04:
0a:88:b7:d7:77:a7:71:cf:ff:6d:bb:7d:d9:95:1a:
01:83:8b:6d:4b:59:ea:12:57:5f:a9:3a:5b:6a:a3:
c3:bf:87:67:14:7d:58:93:a0:cd:89:ad:b4:f8:68:
d8:d2:c3:88:22:be:1c:b3:bb:ce:34:fb:4b:60:17:
30:f4:7d:03:f4:1c:5f:be:8a:f8:9b:a5:4f:12:54:
b1:6a:45:93:ea:e8:05:8e:54:68:e4:93:99:b8:66:
43:96:b4:21:15:99:09:60:9b:d0:70:a2:e8:f5:8a:
ed:da:b9:f6:77:e8:a5:88:b7:c0:07:45:0b:4d:e3:
83:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.108.114.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8253
Signature Algorithm: sha256WithRSAEncryption
1c:1d:b7:44:ef:04:7f:2b:54:f8:af:56:e2:ec:69:ab:f0:13:
fb:67:ac:9f:7d:10:32:d8:1e:0a:b6:d5:f6:d9:01:fd:51:65:
79:b5:b7:0e:72:9a:e8:12:d5:31:6f:25:f5:8a:27:01:36:3d:
52:d6:02:b9:4d:95:41:28:87:fb:82:1c:cc:9a:e0:0c:77:23:
57:00:c8:8a:60:4f:c2:3e:1e:6c:d9:64:ce:02:c4:82:ba:3c:
56:3e:0d:ae:a2:58:e3:ce:dc:75:fc:37:0c:a5:87:60:ab:76:
59:cc:e2:1d:40:66:a5:3c:4b:f9:8c:cd:6e:10:01:03:d7:a9:
fd:11:46:b6:20:ec:fc:2d:75:28:59:7c:9f:30:84:57:46:df:
9b:a8:19:7b:01:16:f8:3c:6a:32:17:2d:e5:b6:74:d6:79:60:
59:22:3e:80:ff:c7:2c:12:15:84:84:60:fb:56:33:5d:14:37:
a9:59:d0:b0:23:f3:f5:e2:5a:cc:ff:7a:74:a8:02:57:77:98:
1b:87:f5:19:03:a8:c7:d8:74:5f:53:71:83:b1:f0:bc:36:28:
62:96:ba:08:20:0b:c3:06:7a:f9:02:8a:a8:e9:30:17:78:da:
a8:e9:f0:dc:d8:b3:12:12:86:fe:73:51:f7:af:ad:6a:2a:0f:
51:a1:71:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:01:31 2025 by rpki-client