Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KDYkAH9E3K9WjDcOf3H5UMsZQO8.cer
File: KDYkAH9E3K9WjDcOf3H5UMsZQO8.cer (raw, json)
Hash identifier: xqQBQGBPPCgVvBmA00Wo3hguIC4pdikWawQit5EGfWM=
Subject key identifier: 28:36:24:00:7F:44:DC:AF:56:8C:37:0E:7F:71:F9:50:CB:19:40:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D730D4FADAD20CE831DF6637139759
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/60c724-a005-46d7-8452-16ce339016a0/1/KDYkAH9E3K9WjDcOf3H5UMsZQO8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/60c724-a005-46d7-8452-16ce339016a0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198118
IP: 92.42.7.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:30:d4:fa:da:d2:0c:e8:31:df:66:37:13:97:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=283624007f44dcaf568c370e7f71f950cb1940ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:6c:8e:de:5d:79:5c:f9:fb:7c:53:42:09:
32:77:91:12:8c:c2:f3:ae:bf:69:01:c9:2d:e4:f2:
21:14:5e:19:ac:ba:f0:16:9d:aa:e6:87:e1:83:52:
31:12:9d:be:fa:9a:f2:30:2a:0e:dc:1a:67:92:a0:
a8:44:7c:91:b8:2d:01:3c:84:94:c9:dc:22:8e:e0:
8c:73:8d:6d:15:11:f0:7e:63:92:a9:c6:fd:62:41:
e6:73:51:6d:bb:ad:02:af:88:56:37:e5:4f:5c:91:
18:a1:68:4b:96:93:a5:97:75:44:96:93:cb:5a:0a:
9d:2c:0b:0d:38:94:48:27:02:56:44:3e:98:ce:1f:
b5:76:ce:32:4d:f4:cc:6a:a0:68:57:6b:46:52:49:
41:7f:c5:c7:90:fd:c0:16:21:b1:9b:91:51:23:65:
52:9e:c0:92:f6:cb:79:a3:c9:c4:f8:77:fb:31:2d:
56:57:c9:90:8f:8e:b5:43:82:fa:91:dc:cf:db:e0:
0e:bc:35:49:ff:1d:14:91:29:b8:1a:1f:cc:18:ee:
f6:db:4b:9b:2d:17:83:32:ea:e5:58:ce:e5:f4:99:
4e:01:87:aa:79:9e:64:df:f5:3c:b7:b2:f7:a4:69:
da:f4:b4:44:23:f5:70:52:e6:d6:1e:cc:b4:a2:0c:
b7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:36:24:00:7F:44:DC:AF:56:8C:37:0E:7F:71:F9:50:CB:19:40:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60c724-a005-46d7-8452-16ce339016a0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60c724-a005-46d7-8452-16ce339016a0/1/KDYkAH9E3K9WjDcOf3H5UMsZQO8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.7.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198118
Signature Algorithm: sha256WithRSAEncryption
10:24:a7:d5:07:84:18:26:9b:48:3c:95:42:c7:c2:77:97:8e:
88:d1:d4:b6:06:44:27:f5:e8:67:0d:8d:c2:89:c5:c9:9e:47:
17:da:bd:f0:09:0b:66:36:24:4a:be:59:f1:eb:aa:61:1b:ae:
5c:6d:92:58:17:c3:51:7f:f4:91:3d:98:17:ab:10:68:7d:46:
85:e4:96:b5:e5:24:c4:e1:9d:db:0f:cf:8a:b3:09:f3:d7:58:
b7:37:c3:dd:3e:87:dc:c3:f6:ee:db:d7:52:f1:86:2f:45:12:
b7:1a:80:61:57:1a:d6:60:22:d3:50:c9:48:d0:58:8e:22:e6:
30:b5:38:cd:f1:7e:53:c5:d7:e3:0f:0a:6b:7a:b8:33:f6:cf:
78:fe:70:c2:06:cf:b2:f2:58:61:d6:d1:8f:43:ba:3a:03:91:
9a:54:e3:d2:da:79:60:2b:e7:d3:ab:4b:b5:2d:5e:c7:a5:48:
0b:f1:c7:5d:68:42:96:78:3f:5a:73:0b:81:e7:6e:ae:b4:ea:
a9:eb:1d:52:a8:38:54:3c:dd:08:43:7b:d7:ca:ec:82:a4:47:
fd:c8:a2:e7:fd:a2:61:1c:62:56:c5:1a:50:4e:83:bc:2c:6e:
2b:c4:00:d0:77:7c:f1:86:dc:12:8f:1f:7e:79:47:2f:fe:65:
76:fd:80:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:15:11 2025 by rpki-client