Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
File: lplI0P5Nf5nVS6i__NmaGmCK4NM.cer (raw, json)
Hash identifier: SbA+nr1wGhteWE00vD71Asp/E88Mz/wvvcgsE1Wd9n4=
Subject key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DF1262568BE425489516D8A560195
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 28748
IP: 37.26.200.0/21
IP: 134.97.0.0/16
IP: 185.23.156.0/22
IP: 192.105.75.0/24
IP: 193.22.2.0/24
IP: 193.22.4.0/24
IP: 195.190.142.0/24
IP: 2001:650::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f1:26:25:68:be:42:54:89:51:6d:8a:56:01:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:8b:c2:a7:b7:4f:a2:e9:a2:23:27:e1:53:
61:d2:ae:87:27:70:1b:97:7b:1e:62:7e:98:e3:96:
e2:80:26:63:3a:bc:06:b4:10:aa:37:e1:e1:13:3b:
bc:46:87:ba:a3:23:6b:53:2f:e2:f1:7e:80:a8:40:
1c:49:92:2a:9b:2b:01:eb:76:8c:eb:70:a7:d3:23:
a7:ab:97:13:03:5e:40:5a:80:a7:8b:e1:d5:d5:e6:
8d:20:01:59:da:a6:5c:09:0f:7c:8a:b4:3a:5e:0b:
c3:17:3a:b6:ad:c1:b7:ec:a5:2e:3f:d7:01:2e:50:
e9:f0:30:a9:63:a6:39:46:95:37:36:b9:12:3f:7f:
ce:94:c7:16:f3:31:c6:15:e9:d8:75:fa:94:33:fd:
29:af:51:1b:76:56:0a:9a:c7:a1:71:ea:f0:62:4e:
1b:0f:92:c0:f0:19:85:45:87:02:1f:e9:d1:29:9e:
85:51:13:bf:9c:94:5b:e0:a2:19:ed:53:fd:6a:5f:
65:c6:1d:b4:9f:3e:8e:3b:50:ca:61:1b:f8:ef:c4:
c3:a9:eb:1c:13:72:03:98:77:93:47:1e:0a:58:bf:
21:46:ab:67:3f:99:1a:ca:22:c8:bb:8c:11:fa:36:
a6:af:f7:80:ed:a3:c7:ae:3b:27:f1:c6:c9:f8:da:
ff:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.200.0/21
134.97.0.0/16
185.23.156.0/22
192.105.75.0/24
193.22.2.0/24
193.22.4.0/24
195.190.142.0/24
IPv6:
2001:650::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28748
Signature Algorithm: sha256WithRSAEncryption
57:ef:0c:be:38:e4:24:83:2d:6c:7b:e0:dc:8c:a5:5d:64:00:
6d:34:ef:df:e0:2f:93:0e:4f:4a:67:95:a3:39:d1:40:d0:b0:
92:6c:7c:b9:07:58:f0:8f:58:16:30:89:a2:23:e3:7f:d2:0a:
64:0d:46:da:16:03:d4:c2:78:31:c8:d7:b0:25:6b:3d:8b:60:
f9:bf:51:a8:3c:9f:27:e0:c2:29:ab:2a:91:1a:61:7d:73:89:
c4:c6:8f:48:0a:b2:3b:d4:2f:96:62:c2:01:98:2f:d8:cd:8d:
e0:44:05:eb:91:c2:63:d2:6a:b1:0d:d6:9d:58:3b:14:e1:1f:
52:e5:e0:52:6c:20:c0:0f:e0:af:20:7d:24:35:f4:98:ab:e9:
46:b0:21:42:5f:ce:14:07:b8:be:24:d3:1f:c3:0c:0e:9b:70:
c4:51:b9:74:7f:94:e5:53:7c:b3:b8:ec:35:10:a6:c7:fc:17:
8f:ed:08:f1:60:cf:fb:41:62:e2:21:13:64:30:ba:0b:17:85:
6e:1f:d9:12:4f:df:14:04:fe:cc:d7:c7:51:e1:1e:f9:ec:07:
47:10:be:df:3e:1c:92:e3:17:56:34:2c:0f:bf:0a:a1:ef:9d:
58:c1:43:d2:e4:da:fd:30:3e:de:d0:81:10:56:76:48:83:5d:
30:a7:5c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:10:11 2025 by rpki-client