Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TuwmeuLxv5Xm16FCCA5d96MTlJI.cer
File: TuwmeuLxv5Xm16FCCA5d96MTlJI.cer (raw, json)
Hash identifier: tYxiqztlEtxqbtlYhF+fAfsXhoOVyyrMcfjJ0QyN6UM=
Subject key identifier: 4E:EC:26:7A:E2:F1:BF:95:E6:D7:A1:42:08:0E:5D:F7:A3:13:94:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DCCA2AD45422DBB78BD3D52BBE540
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 28759
IP: 193.138.66.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:cc:a2:ad:45:42:2d:bb:78:bd:3d:52:bb:e5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4eec267ae2f1bf95e6d7a142080e5df7a3139492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:25:3f:a0:1e:81:24:8a:73:3e:2e:24:d0:e2:
52:21:cc:6a:db:27:04:a0:25:db:6a:27:46:68:30:
58:99:be:dc:2f:ba:19:91:c7:ea:37:fa:82:86:4b:
45:05:d0:83:e4:9c:ec:14:92:08:8d:b7:a4:aa:66:
0f:85:6d:d5:2f:d0:22:6b:bc:f8:c1:de:22:96:3f:
e9:0e:ff:1f:90:af:3b:77:e5:2f:2b:6a:31:23:75:
67:9e:5c:46:4a:81:75:69:61:79:62:c5:38:8e:4a:
84:c6:9e:b3:0a:0a:65:71:7d:2f:a0:6a:f0:ab:20:
39:03:d2:63:bb:5b:6f:d0:fe:fd:bf:94:f7:0f:67:
62:fc:1b:e6:97:dc:e2:fd:b8:d1:a4:c9:96:fd:11:
69:71:92:43:7a:07:4b:ab:14:2f:cc:fa:f1:03:cf:
07:5d:04:89:9b:bf:ab:ea:7a:03:f6:ea:15:55:25:
e7:8e:66:2a:34:07:76:54:63:f0:bf:1f:98:36:08:
cd:7e:fd:74:b9:08:a7:32:46:f0:f1:59:e4:9d:4f:
b2:1e:af:e6:fe:49:56:b1:c5:72:72:c8:2c:8c:1e:
03:80:2c:73:41:82:01:b0:40:57:b4:0c:af:71:21:
ea:40:7e:2e:4e:91:75:61:87:07:ed:84:e3:0a:ca:
e6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EC:26:7A:E2:F1:BF:95:E6:D7:A1:42:08:0E:5D:F7:A3:13:94:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.66.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28759
Signature Algorithm: sha256WithRSAEncryption
31:9c:b5:ff:ad:e7:d8:65:fa:1d:ab:68:1d:5f:a8:03:d2:26:
fb:5d:55:ac:5a:90:9d:11:c8:f6:1b:10:2a:4b:01:1d:bb:40:
53:c2:42:3c:18:8c:b5:b9:a0:98:ba:b1:a9:19:6a:76:37:0e:
fe:8a:0e:c5:88:27:85:32:0f:a8:2b:92:08:12:ee:c5:de:57:
b7:6d:47:28:21:6b:2d:2c:cd:bb:93:ab:62:e2:9b:c4:98:4f:
ce:de:18:f8:70:36:fe:fd:14:81:9c:02:9e:b4:94:b9:a4:e0:
12:d1:9a:92:3d:e4:f2:dd:8d:c3:06:ed:bc:68:0c:1e:6f:81:
d8:4a:19:8a:4d:1e:6d:03:56:61:d3:dc:18:32:13:49:c6:dc:
18:a9:8a:3a:35:b5:89:54:10:d4:90:b4:4e:d0:41:8a:56:d1:
2f:cb:5d:c6:5c:05:c3:56:34:ff:63:80:5d:94:eb:ea:c4:ca:
5d:e2:84:7f:ed:3a:5c:70:c5:49:4e:5f:ed:38:d7:f6:f3:8d:
7a:fa:a6:ab:bc:e3:d0:7c:94:5b:12:28:6c:70:50:d8:64:e0:
f6:e5:b3:2c:4c:f9:66:3f:7c:23:73:68:79:78:43:ab:78:a2:
37:01:a4:1d:0e:84:db:0f:82:ba:af:08:4b:b4:26:58:c9:81:
54:61:b4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:00:32 2025 by rpki-client