Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
File: lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer (raw, json)
Hash identifier: okyMNfRayDm/J8UB0ADN0inEDA1bOLoZJ7LC9oJ/4jo=
Subject key identifier: 97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B234F5F4C58353F8B4ADB3FA3BC34B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206426
IP: 185.108.224.0/22
IP: 2a06:4c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:34:f5:f4:c5:83:53:f8:b4:ad:b3:fa:3b:c3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9735a94f31546d437b89720e844b2f12a5abf268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:c0:53:fe:49:fc:c6:4a:ec:4e:1b:b4:4e:
9d:15:4e:f6:b7:f3:42:65:60:c5:ba:1e:7d:ac:b9:
98:c8:fe:62:7a:1a:fd:d8:db:7d:4c:4d:00:56:29:
2e:00:28:9b:d1:bd:c6:21:ec:f6:35:ee:0e:8f:23:
bb:40:e8:f0:3c:6a:e2:17:b6:02:c9:f1:9e:96:62:
b4:02:a8:85:2e:65:dd:68:51:0b:b1:2b:c4:bd:c4:
09:61:c0:ac:d2:ab:ca:c5:e7:6a:ec:b6:37:f2:77:
8c:b3:c3:c6:37:58:22:0c:65:04:01:d2:9e:e9:fa:
12:db:a8:67:02:e6:9b:74:8e:08:d4:65:32:27:db:
74:2b:d9:29:8d:1a:f7:c3:ec:a1:b9:f2:cc:d2:08:
54:79:51:ff:35:73:b8:e1:3e:54:bf:62:ac:ca:11:
2e:e2:c6:6f:82:8b:95:0a:59:fe:49:86:dd:81:05:
03:c5:f6:7f:8d:93:e6:9e:e1:16:b4:13:ab:b1:7c:
f8:e9:15:fc:39:cd:35:50:b4:9d:17:d5:77:e9:c1:
a1:33:b5:27:a3:f9:9c:b9:bd:98:7a:00:26:d2:6d:
c9:98:40:b4:cc:23:42:e8:f2:88:8a:85:b3:d0:17:
e6:43:89:45:ae:9c:4f:66:20:44:d2:6e:24:a5:76:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.224.0/22
IPv6:
2a06:4c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206426
Signature Algorithm: sha256WithRSAEncryption
02:41:d9:84:1e:15:7c:bf:61:e8:a8:22:2e:1f:81:6d:68:34:
6a:29:70:98:a0:4e:bc:37:d1:c4:4b:bf:e6:37:f5:80:eb:95:
6b:41:1d:ac:42:ab:1c:28:13:9c:9c:bc:ae:d1:88:69:3b:84:
b9:38:a6:db:57:4b:6b:fb:43:4a:0e:b6:74:4e:f9:72:d0:21:
8e:58:f2:8f:3e:1d:ed:c5:24:c5:51:60:50:6c:92:05:f9:24:
fc:26:82:b4:9c:ec:52:cb:3f:81:a2:a2:91:6d:7b:fa:7a:f9:
1b:66:82:72:27:28:0f:9b:03:f7:8e:e8:2b:49:31:9d:91:f2:
2c:6c:14:37:17:70:b8:f6:2f:73:50:f3:4f:37:12:42:3a:04:
47:a4:b1:77:a3:b1:0d:b9:ce:75:ef:d6:1b:55:f3:e8:91:50:
2f:81:92:37:3b:aa:66:e9:28:dd:53:9e:89:a6:7d:46:f0:32:
38:50:b5:46:87:a3:94:b1:d8:56:6a:aa:72:47:2f:c3:23:11:
75:52:cf:9a:c1:72:c6:ad:98:a0:0f:cb:44:75:f2:e5:a8:e2:
e0:34:a7:40:40:d0:e0:c4:d5:fe:91:66:6f:97:37:ac:8b:d2:
18:f9:c2:4a:40:21:d3:4f:d5:e6:cb:5e:09:7c:03:ea:89:63:
47:84:79:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:43:49 2025 by rpki-client