Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
File: Ami5ML7spR-_NUP-efmxk0XPE9U.cer (raw, json)
Hash identifier: P76PG9NlpVQbXyfoJ/37DUK9iGaVHRu0IFHiJzm8IXo=
Subject key identifier: 02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D98C145760762BC355F40892951288
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204091
IP: 192.76.164.0/24
IP: 192.76.171.0/24
IP: 192.83.216.0/24
IP: 192.94.78.0/24
IP: 195.138.197.0/24
IP: 2a13:3700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8c:14:57:60:76:2b:c3:55:f4:08:92:95:12:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:4d:32:b1:5c:95:c5:b6:15:d1:03:79:07:
06:54:66:d3:5d:d4:ef:cb:1b:09:25:15:0a:80:25:
1b:4f:3a:3e:9c:13:03:a3:83:b0:41:98:fd:a2:14:
e3:47:8d:b6:0b:22:52:a7:0e:64:6c:99:ca:b0:85:
14:8c:4e:a1:17:33:0f:f1:63:c0:b3:e7:8a:d2:40:
07:08:73:9a:ad:0e:7c:44:92:3b:cd:c8:25:34:b5:
3d:57:9e:18:72:e5:e8:41:88:3d:df:c8:77:d4:56:
e9:df:33:45:75:fb:91:ca:8a:77:69:0b:e5:f6:5f:
2b:d6:6d:08:d8:8e:31:5b:1a:d6:41:9e:13:3a:7e:
d1:fa:4a:70:fa:20:85:7b:22:f3:6a:36:54:4f:b6:
25:0c:b7:dd:86:0c:05:c6:e5:c1:b0:d2:d3:92:aa:
49:e2:3d:23:0e:2f:ba:ea:39:b6:7f:f8:f2:6a:05:
bc:ed:a1:96:a9:16:14:d7:b9:64:8f:91:98:da:e7:
e4:0f:f1:bf:d3:03:30:5a:b1:05:a3:de:51:47:8a:
ef:c4:cc:fa:df:df:25:e5:a6:b0:4f:92:8c:ef:19:
d0:40:51:ba:a8:ec:dc:b8:39:a8:8c:71:42:36:ef:
fc:f7:c8:db:cd:ae:9b:0e:38:e3:21:26:44:3c:f7:
6f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.76.164.0/24
192.76.171.0/24
192.83.216.0/24
192.94.78.0/24
195.138.197.0/24
IPv6:
2a13:3700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204091
Signature Algorithm: sha256WithRSAEncryption
4d:b7:7d:2f:32:43:53:de:1e:53:de:f8:eb:03:cb:9f:08:95:
cb:e7:49:8e:f9:5b:fa:c3:69:6a:74:90:4a:de:07:74:a9:f0:
b4:57:c4:93:e3:1c:aa:c2:1b:e8:e6:53:18:45:70:41:16:00:
56:96:8b:87:bb:f9:c9:d5:7b:22:ed:42:d6:56:24:cf:ce:fe:
92:ea:19:d4:c5:5a:0c:43:8a:83:56:60:a6:eb:97:58:d2:af:
81:03:ec:72:e1:4c:7e:c9:6a:8b:24:c9:fb:e1:3f:d8:92:87:
2b:58:97:1d:f4:c1:99:c0:58:bc:51:13:cc:a0:67:2e:24:de:
f3:9d:04:42:68:44:51:ef:a8:12:67:e0:eb:dc:27:49:ee:6e:
c7:46:47:ca:19:bb:48:88:ff:6b:d2:93:73:24:3e:fe:3b:5d:
89:8c:99:7a:b6:59:7b:08:bc:37:13:0b:75:ea:71:09:99:e6:
10:b8:c4:cc:4a:d1:ee:96:de:a0:45:9b:dc:30:5c:06:cb:7c:
a8:56:a1:8d:33:69:60:87:a5:65:1e:ac:31:04:b4:8e:11:4e:
0e:da:95:b4:1a:5b:36:c3:8d:20:c0:5d:de:81:cc:98:25:ba:
55:b2:35:f5:5e:69:09:9e:54:71:e3:e3:d3:91:87:1e:67:9a:
06:5c:52:c7
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAZQm2YwUV2B2K8NV9AiSlRKIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjY4YjkzMGJlZWNhNTFmYmYzNTQzZmU3OWY5YjE5MzQ1Y2YxM2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB9NMrFclcW2FdEDeQcGVGbTXdTv
yxsJJRUKgCUbTzo+nBMDo4OwQZj9ohTjR422CyJSpw5kbJnKsIUUjE6hFzMP8WPA
s+eK0kAHCHOarQ58RJI7zcglNLU9V54YcuXoQYg938h31Fbp3zNFdfuRyop3aQvl
9l8r1m0I2I4xWxrWQZ4TOn7R+kpw+iCFeyLzajZUT7YlDLfdhgwFxuXBsNLTkqpJ
4j0jDi+66jm2f/jyagW87aGWqRYU17lkj5GY2ufkD/G/0wMwWrEFo95RR4rvxMz6
398l5aawT5KM7xnQQFG6qOzcuDmojHFCNu/898jbza6bDjjjISZEPPdv2QIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFAJouTC+7KUfvzVD/nn5sZNFzxPVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliLzQzY2Q5
OC02ZjhhLTQ0Y2YtOTViZC00MjBmOWM4ZWFmYTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvNDNjZDk4
LTZmOGEtNDRjZi05NWJkLTQyMGY5YzhlYWZhNC8xL0FtaTVNTDdzcFItX05VUC1l
Zm14azBYUEU5VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF
BwEHAQH/BDcwNTAkBAIAATAeAwQAwEykAwQAwEyrAwQAwFPYAwQAwF5OAwQAw4rF
MA0EAgACMAcDBQMqEzcAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMdOzANBgkq
hkiG9w0BAQsFAAOCAQEATbd9LzJDU94eU9746wPLnwiVy+dJjvlb+sNpanSQSt4H
dKnwtFfEk+McqsIb6OZTGEVwQRYAVpaLh7v5ydV7Iu1C1lYkz87+kuoZ1MVaDEOK
g1ZgpuuXWNKvgQPscuFMfslqiyTJ++E/2JKHK1iXHfTBmcBYvFETzKBnLiTe850E
QmhEUe+oEmfg69wnSe5ux0ZHyhm7SIj/a9KTcyQ+/jtdiYyZerZZewi8NxMLdepx
CZnmELjEzErR7pbeoEWb3DBcBst8qFahjTNpYIelZR6sMQS0jhFODtqVtBpbNsON
IMBd3oHMmCW6VbI19V5pCZ5UcePj05GHHmeaBlxSxw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:44:54 2025 by rpki-client