Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
File: R-ph18wsJ4p8S8-8ITezlKImVK0.cer (raw, json)
Hash identifier: f6iOidrAD/u4LMiOvez1qtZUcxzC59nkPSG8bm0M3lE=
Subject key identifier: 47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424459450084C064BBB502268B89A7D42
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42640
IP: 195.248.228.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:94:50:08:4c:06:4b:bb:50:22:68:b8:9a:7d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:bc:99:ed:43:ef:42:24:4a:22:4b:20:d8:
38:a3:1f:64:4b:09:bb:34:49:d4:eb:33:c5:fa:f8:
41:3a:9a:9b:08:d3:70:1c:44:9b:fa:64:18:30:29:
0c:49:e8:a0:25:04:3a:40:9c:b2:27:e6:df:10:70:
25:11:f1:92:b8:be:77:c7:2a:e5:89:6b:d9:39:47:
e3:c0:32:85:6d:2a:1e:9f:4b:0e:b7:e4:94:e8:80:
ee:b2:8f:30:7a:c7:bf:57:a9:d6:4e:68:5a:36:f6:
d2:9f:68:de:85:d1:6e:42:a2:f9:d3:25:07:b8:5d:
7b:78:8a:ba:98:22:4d:26:0e:8d:4d:47:11:ea:2a:
37:af:a1:88:8e:04:10:e3:7e:79:c3:5c:09:74:ce:
ae:4c:b2:2d:28:f0:75:c4:2c:e6:ca:93:f8:78:e5:
19:05:60:4c:11:ee:bf:94:d3:b9:f9:3c:59:14:b6:
b2:50:14:2f:df:0b:cb:96:1f:22:53:06:e6:8b:31:
11:8a:37:71:cc:03:d7:2f:2f:fd:5e:4a:17:09:4f:
57:86:65:fa:cc:50:c8:3d:59:b6:9d:01:c0:44:40:
d9:a8:08:87:b1:a2:f7:83:7a:de:4e:7c:08:e8:21:
58:62:68:a8:e2:7a:09:dd:97:ef:41:07:b5:9b:be:
59:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.228.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42640
Signature Algorithm: sha256WithRSAEncryption
51:30:dd:2f:0f:f1:59:47:7f:00:08:a8:7e:2c:4d:a3:c3:55:
52:e6:84:e7:29:d3:06:89:ab:c0:85:a1:bd:aa:9a:6b:97:9c:
f6:2e:1a:c5:a2:76:82:0c:d6:3c:5b:ad:c7:91:e3:c8:4e:58:
69:e9:e4:eb:04:2a:62:df:8b:95:35:c2:c8:07:84:76:13:5e:
42:dc:74:a7:eb:5d:d7:1e:0d:de:d7:15:96:ca:43:ea:63:46:
f6:ba:ff:85:96:6e:b2:d1:77:67:9f:46:63:5d:9f:ac:ec:69:
f9:a6:31:b2:58:57:eb:cd:7e:1e:8b:bd:8b:16:7e:16:a6:73:
85:6f:20:ae:0c:75:bf:93:77:d6:60:b6:f5:47:75:8b:33:8a:
e0:a5:7a:81:02:13:30:6f:80:99:6e:b6:33:85:e8:b7:96:22:
1d:a4:81:86:cc:e1:27:ad:57:87:6d:60:96:31:b5:4c:e3:0f:
27:22:08:18:c5:30:19:21:14:45:69:3d:fd:e5:ac:47:96:4f:
c6:d4:84:7d:d9:fc:a9:05:1b:06:21:36:8e:cb:9a:9e:ed:5e:
52:19:b0:84:bb:d9:58:2e:de:cb:be:81:96:60:aa:bb:45:aa:
a9:d5:44:88:33:8f:08:13:a7:0f:6e:bc:ac:68:d1:17:cf:30:
3e:fb:21:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:48:10 2025 by rpki-client