Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer (raw, json)
Hash identifier: woVWO9HGVbn1YCeELuGkMpCvKxiifM/b8BusEmlvemE=
Subject key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019547D5E7F8A613FF49C0DA6568582AA541
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 27 Feb 2025 14:35:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204470
IP: 185.248.212.0/22
IP: 2a0d:d780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:d5:e7:f8:a6:13:ff:49:c0:da:65:68:58:2a:a5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 27 14:35:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:aa:42:a4:a9:94:7b:3f:3b:7b:71:11:ac:be:
00:36:82:b6:c3:b4:88:12:b8:8a:cc:36:7a:63:2c:
08:69:8e:0f:a4:86:fb:04:58:ca:79:01:d5:4e:ec:
84:06:74:69:c9:51:fc:e9:16:56:64:e3:2f:34:26:
74:03:64:48:92:e2:4f:f5:38:2c:d6:81:cc:99:36:
82:6a:a5:db:06:29:64:dc:50:89:68:8a:73:bb:f5:
cb:4b:36:f6:0d:74:b3:23:db:be:66:c0:c0:b7:f2:
76:a3:17:18:f1:17:0d:2b:6d:a7:d9:b0:4e:e3:d9:
88:3f:2b:82:92:2d:d3:90:c9:8a:98:ec:26:26:bb:
9c:18:d7:ac:25:9f:3d:60:00:46:00:05:86:f3:8c:
26:50:de:1a:2f:c1:4d:3f:c0:be:14:dc:c0:8a:d3:
1f:46:4a:04:1a:58:55:97:c2:b3:b3:0d:79:68:2d:
aa:40:54:68:b9:36:bd:f9:61:ee:8b:16:42:0e:aa:
97:b9:2e:99:97:90:00:91:f2:30:3c:f3:0b:2a:93:
e9:56:c6:3d:4e:3b:08:c2:68:be:65:a5:a8:5d:39:
65:3e:f7:f1:1c:e5:43:1c:80:2c:f9:ea:0d:a5:4b:
2d:aa:a6:b1:ab:51:08:48:0c:65:21:8d:e2:1a:b6:
94:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.212.0/22
IPv6:
2a0d:d780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204470
Signature Algorithm: sha256WithRSAEncryption
ae:34:3f:65:68:df:c1:30:8e:6e:d7:5d:ff:64:48:06:82:ff:
82:32:c7:e6:02:7c:1c:c7:ed:e2:b3:ec:d4:e2:d6:d2:ea:a9:
10:03:52:70:ad:56:85:aa:2a:a6:58:5c:d5:14:79:b2:55:7c:
48:91:1d:2d:6a:2e:1c:a0:7a:99:13:f6:10:82:92:10:cf:ae:
08:97:9a:7b:5c:a1:72:23:e5:05:c4:b7:49:e3:6f:9c:14:9d:
85:5e:4d:8a:5e:3c:ff:a0:27:86:ea:8a:7f:dc:62:27:ab:98:
25:3a:37:25:22:60:5e:0a:8f:3c:5b:5e:bb:6a:3e:e6:f7:90:
74:be:8c:a1:4c:a7:60:e4:de:60:2f:ec:91:7b:d0:23:c4:a9:
d4:c8:17:51:be:44:0e:30:78:da:61:32:58:0a:23:d2:9b:fe:
f1:77:6b:82:ff:b3:f7:97:d3:67:ff:dc:04:0e:2f:9e:d0:06:
43:50:65:30:b4:f7:9e:8e:c7:f3:3b:c0:42:3d:40:6c:64:09:
37:9e:2c:66:88:d7:62:c4:11:6d:f5:a7:48:17:5d:ab:e1:40:
ce:9d:ed:5c:5c:d2:6a:e8:7c:f8:74:0d:ae:96:8f:d6:07:c7:
ca:48:52:37:91:a4:9c:64:1b:3a:1d:3f:c3:a2:72:65:b9:f4:
c3:02:40:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:27:44 2025 by rpki-client