Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
File: dBc29lciH8E0MWMjsHQFhanBsgw.cer (raw, json)
Hash identifier: 1/NC6bPCCbcGT6xIczPpX+SaQWm1g9OeLx3C3EG2Eew=
Subject key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3EF95CD017D5E90CD7A4BA116D645
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 61079
IP: 185.19.164.0/22
IP: 2a04:1240::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ef:95:cd:01:7d:5e:90:cd:7a:4b:a1:16:d6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=741736f657221fc134316323b0740585a9c1b20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cb:af:71:94:90:c7:7b:07:9c:b8:95:1e:a5:
9d:43:4c:aa:36:b3:0b:8c:33:4a:e2:1e:fd:94:f6:
1c:ef:59:33:66:ff:37:e9:25:ae:5e:05:1d:81:06:
8c:c1:0d:d0:1c:f5:c8:68:a8:b8:05:00:04:c3:81:
72:af:57:bf:2d:90:99:eb:08:19:d7:d1:4a:f0:ac:
a6:b0:3a:33:0c:c8:71:ca:6e:cf:53:2b:26:cf:2b:
99:12:ed:39:53:56:d0:8f:90:1c:e4:cc:5f:1a:0c:
2f:bc:de:0a:08:89:a1:79:b0:be:5e:b6:04:36:b9:
fe:7e:31:3a:04:b2:ac:ac:df:f3:01:d2:b6:53:42:
f7:28:d5:03:20:a3:cf:93:00:16:a9:8f:66:34:6d:
f8:23:f2:95:b4:9b:7c:c6:87:41:69:cb:60:68:ae:
ab:93:8d:f4:b8:9f:66:2d:e4:c3:36:ed:dc:3b:4e:
eb:dc:45:7e:0b:ed:8c:42:50:ba:2a:94:e2:33:32:
fa:f9:2d:1f:13:52:9c:58:de:63:f0:af:bf:ca:d4:
bc:92:6e:48:2d:e1:2a:f8:ad:88:16:26:61:35:19:
5d:b3:61:f9:04:0c:9f:34:97:3d:ea:ec:42:90:07:
2f:73:74:33:65:66:d0:ae:5d:70:d5:62:7d:17:91:
5c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.164.0/22
IPv6:
2a04:1240::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61079
Signature Algorithm: sha256WithRSAEncryption
16:c7:dc:82:e3:de:39:86:2d:f2:03:b3:ef:cd:3a:7f:fd:6e:
d9:13:19:cd:4a:57:1d:18:db:49:ad:47:27:c1:87:b6:87:38:
8d:db:07:d2:b5:89:32:b2:02:5f:59:d9:3a:74:d9:3b:da:2d:
c6:e0:69:65:89:21:00:6e:c1:c7:3e:0f:1b:31:a0:3c:6d:57:
2a:fa:c1:1f:b3:d1:7a:3b:4e:94:fb:a8:59:21:a7:18:54:b7:
f9:48:1d:f6:92:d9:3e:e1:39:6d:ed:c7:8b:10:8f:97:a9:12:
2a:2c:19:95:9f:2a:68:cd:a7:91:90:ff:fd:06:ef:53:a4:53:
c4:2a:79:23:78:35:8b:ae:c4:db:57:3f:26:3b:69:0e:ba:27:
c2:e2:5f:73:34:08:aa:8d:f8:70:80:5c:67:89:97:78:ac:b9:
9b:86:bd:2a:60:b5:05:fd:73:80:eb:46:52:94:0f:bb:a8:63:
27:29:7f:73:fd:c7:ab:24:0b:ac:b9:85:dc:e9:1a:4a:f6:f8:
75:1e:89:ce:6e:9a:67:72:28:1a:f3:67:52:5b:82:77:6c:78:
9f:a9:c6:8e:88:e8:5c:53:94:05:3b:14:fb:76:ed:7d:62:62:
5d:d7:20:2e:8a:28:a0:27:96:71:4c:ef:e3:b8:58:cd:54:ff:
6c:92:a4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:30:44 2025 by rpki-client