Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
File: ZEzbroSyaoSEsQwA6_37y0mQwVc.cer (raw, json)
Hash identifier: 8RjHo58wqHuhmAhhPldMwKH/ENhyLeoj+R6sbGYE7z0=
Subject key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D944D3EFC32B010C5588DBD4A6EAE0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209920
IP: 185.244.16.0/22
IP: 2a0f:9080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:44:d3:ef:c3:2b:01:0c:55:88:db:d4:a6:ea:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:7a:45:63:e8:42:73:c3:d9:e0:cc:a8:16:
08:f8:5b:c0:3b:54:f4:47:8b:16:be:cf:39:8a:84:
24:e6:6e:9d:59:44:da:b4:29:f3:22:61:e7:cf:bc:
9c:52:39:a7:3c:48:57:62:e2:7c:eb:55:03:46:57:
86:7b:0b:50:2a:e6:55:d7:59:93:b7:02:9d:1f:f4:
20:96:55:15:1d:b6:11:72:c9:26:72:d7:64:58:98:
2e:70:93:37:0a:a7:51:94:cf:f4:40:ca:e0:58:2c:
e2:ec:e9:dd:dc:8b:8a:13:d2:a6:ec:9d:2c:82:07:
ba:44:65:63:61:e3:34:55:05:f5:36:70:9c:52:03:
dc:e7:e9:33:7c:c4:06:93:22:40:bf:3d:5c:33:49:
70:d4:d8:b9:c3:59:3f:b9:1e:d2:8a:fe:c4:12:0e:
9a:d1:d2:e2:d9:0b:e2:dc:89:37:88:29:81:94:74:
16:d2:ed:b7:9f:1e:09:c8:7e:77:53:1a:79:cf:db:
48:79:19:77:da:32:07:cd:29:55:33:15:7d:cb:81:
1d:d3:c2:ee:73:0c:2e:6d:e5:9a:e2:6b:2d:d7:67:
bb:59:be:23:c8:61:94:c0:93:e2:af:7f:33:ad:38:
2a:1e:09:84:6c:9a:91:09:f3:11:0b:4a:59:5b:41:
d6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.16.0/22
IPv6:
2a0f:9080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209920
Signature Algorithm: sha256WithRSAEncryption
5f:7e:9c:91:dc:0c:cf:c5:fb:8b:4a:16:48:6a:6b:6c:a3:76:
7d:6f:26:f9:00:55:a0:1b:42:f8:2f:8f:bb:1f:df:5e:51:9c:
0d:e4:5d:3e:d7:74:a6:94:2a:aa:76:0e:9e:d1:a4:ef:b8:f6:
a2:96:f9:c9:06:02:67:10:18:54:d3:68:f7:a1:37:e6:44:b5:
92:66:ec:66:ba:6e:28:9b:6f:bf:4a:86:25:56:f4:7d:83:90:
d2:c8:f5:0a:90:95:3f:8a:4b:a4:fd:d4:6b:7a:c8:65:a2:15:
f9:49:16:6e:46:58:ef:68:2f:41:e8:08:92:12:42:47:25:46:
c5:72:75:b9:5d:d2:4f:bd:99:01:24:8d:22:d1:5a:a0:a7:2d:
f8:67:ca:5a:f9:b0:1e:da:60:9a:02:49:7d:8b:b9:4d:82:c8:
8b:c2:74:82:f3:3c:9e:8d:a4:92:b5:75:c8:2a:d7:c4:66:05:
dc:f6:79:11:99:70:3b:2d:4c:a0:74:d2:dc:e0:29:f7:01:f1:
99:83:c6:46:30:87:f2:18:dc:17:25:54:e0:60:1b:8e:9a:39:
ae:81:b8:7f:54:4c:9d:82:42:3b:8d:fd:0f:45:85:c7:3c:c8:
ca:5b:d9:5d:0a:fc:04:9e:9f:97:7f:ab:99:d5:fe:83:40:73:
3c:13:99:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:29:00 2025 by rpki-client