Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
File: nLt3urQ4qT002dXAqOC57zKuXaA.cer (raw, json)
Hash identifier: Ub7nAB2ebLLXUX+QmUR7T6cIbqXqgNX4/m+AxS1YEOY=
Subject key identifier: 9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C1A258B761C49732C36C4A6250D22
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 62462
AS: 196660
IP: 31.216.176.0/21
IP: 185.35.40.0/22
IP: 188.95.184.0/21
IP: 2a00:4480::/32
IP: 2a00:dea0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1a:25:8b:76:1c:49:73:2c:36:c4:a6:25:0d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:c9:db:da:0e:a0:15:ee:21:56:1b:29:4b:
a1:0a:7a:6c:8b:49:d8:93:d4:e9:9a:54:ca:e6:ad:
45:56:a1:0a:3c:1a:27:56:fe:36:b1:f0:93:20:e2:
88:f0:4e:d6:c9:d6:dd:cf:2a:2d:9a:22:3b:d5:24:
f3:90:cd:ff:a2:a3:97:ed:63:37:7c:82:fd:cf:66:
d6:33:72:eb:39:e3:c7:7c:3f:2f:20:ec:fe:15:58:
85:e5:11:8a:94:1e:6a:94:ff:bc:8e:9a:61:bf:c6:
e8:85:39:61:b8:73:5d:3f:58:61:86:47:1c:41:23:
65:91:47:2d:39:ce:59:d4:b5:59:ca:9f:97:ed:f9:
6c:a2:a9:7a:a3:2e:42:db:73:a2:88:eb:c3:81:0f:
31:34:e1:04:2a:e7:de:fb:df:48:42:61:a4:f8:6e:
21:e2:5e:56:6e:87:b5:11:d0:17:b0:8a:63:36:89:
2b:bc:7e:33:63:a9:c8:d2:fc:8b:3e:e4:fe:19:9b:
64:df:f2:16:4a:b1:05:fa:f2:e0:56:ee:90:b1:e1:
99:af:2e:04:6e:05:3f:78:bd:45:a9:e9:14:50:ee:
8f:2f:f5:08:36:93:ee:04:9e:08:98:a4:f2:3d:a7:
4a:21:a6:a9:d0:f6:53:0d:3b:77:ac:c4:b0:8b:8e:
21:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.176.0/21
185.35.40.0/22
188.95.184.0/21
IPv6:
2a00:4480::/32
2a00:dea0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62462
196660
Signature Algorithm: sha256WithRSAEncryption
98:89:d4:ff:8a:3a:cc:53:5e:fd:1e:52:26:2d:d9:e7:89:eb:
bf:7a:e5:18:78:3d:82:90:85:fc:26:db:83:62:99:6d:6c:ac:
52:48:67:fe:d7:20:fe:59:6b:a2:c7:af:b9:fa:3f:53:0d:36:
d0:88:71:93:b8:6e:fe:02:1e:d6:a0:b8:ab:e4:5d:0f:5b:2d:
95:ad:53:5f:cc:66:7d:6a:d1:d7:b5:69:9e:55:58:3d:45:4c:
a1:e3:63:8c:e2:6f:cb:ad:f7:84:65:72:24:c8:ca:91:65:7d:
bb:e4:e4:9c:51:63:6c:0d:fc:6d:f4:95:71:be:54:76:4c:57:
70:6f:b6:aa:43:a5:e2:22:93:2b:54:4c:40:89:4c:b2:f9:39:
ea:0b:f6:60:b5:8e:d4:5f:8e:4a:85:40:cd:3d:23:9d:1a:fe:
2c:99:49:2b:4b:f2:18:e8:a5:49:58:65:0c:db:4b:4a:e7:18:
1b:e6:ab:c9:2a:0b:bd:84:9f:b7:91:f7:13:ba:fd:6b:20:c1:
2a:31:4c:ec:03:b1:83:be:d9:27:e1:73:3f:61:4f:59:4a:72:
b0:ed:8b:42:c9:6c:6e:e7:a6:75:3d:6a:21:a0:8a:93:a8:65:
86:7f:b2:57:64:e0:a7:84:16:0b:33:b1:9c:42:4f:e2:d7:ea:
22:ab:5d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:46:55 2025 by rpki-client