Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
File: q6-0Li5v0JBX_KIbmQhNrDt68tA.cer (raw, json)
Hash identifier: yz+7lcYKTD8tZF+Exm7RGPrjYwi3qTf5lB1IolJ37Fg=
Subject key identifier: AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067DBC9F3C90962EDF31B34D5183C2B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200295
IP: 80.64.208.0/22
IP: 2a0d:1c40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:db:c9:f3:c9:09:62:ed:f3:1b:34:d5:18:3c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:dc:ea:4c:5a:bc:9f:f4:bd:93:94:50:dc:
a8:b5:d6:15:4f:5a:20:bc:ad:4a:27:8d:dc:32:0a:
00:9a:c5:0e:5b:37:36:82:85:0a:3a:45:e8:08:16:
c3:8f:19:a2:9b:12:86:47:53:6a:a4:e1:c5:a2:c5:
b5:18:c0:57:27:08:df:58:e4:97:e6:c0:bc:54:9e:
9b:52:d7:63:a9:28:f4:dc:24:01:f2:ce:77:07:70:
ca:b7:aa:5d:f7:84:3b:a9:6c:09:62:75:fd:23:77:
ed:c4:01:a0:ac:dd:d7:95:bb:bf:0e:16:d9:25:1b:
4f:d4:50:a4:af:ac:0c:58:39:b0:19:cf:4b:25:9a:
f8:76:53:31:df:fc:04:fd:60:a7:fa:d2:65:49:0f:
cf:fa:d6:85:71:6f:fa:ec:25:bb:f2:f0:85:43:0a:
4b:ce:bc:97:be:46:dd:71:cf:de:8a:0e:06:1b:87:
35:3d:ec:1c:a7:70:3b:3c:23:61:2c:78:92:cd:c8:
20:5c:96:bb:ab:65:3f:68:c6:00:d7:79:e5:13:26:
59:ee:70:47:88:c3:8e:cb:db:f9:d0:65:19:3f:39:
ab:10:a9:91:bc:9a:6c:6a:57:ad:30:e3:5f:be:c3:
ae:07:e6:b9:55:07:72:cc:27:37:08:40:06:e6:e5:
b6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.208.0/22
IPv6:
2a0d:1c40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200295
Signature Algorithm: sha256WithRSAEncryption
86:27:19:ec:ce:49:6d:72:97:a0:13:3d:9c:88:56:fc:01:c6:
a9:29:32:e5:03:e3:42:d8:88:ca:ea:88:9f:db:de:68:2c:d3:
38:f2:56:e9:cf:7e:25:d1:69:31:d1:a7:51:aa:9b:26:19:6a:
52:b1:5c:12:56:aa:af:33:62:bf:88:c8:7e:d4:08:53:62:fe:
9c:27:a4:d5:ec:3a:1a:2e:d1:52:e2:76:89:3e:20:60:e8:5c:
31:4b:d2:c0:5d:e6:6a:06:30:19:90:80:f2:7c:ef:41:bd:d3:
96:83:36:3a:02:4c:4f:98:0f:5a:c8:5a:a9:79:e5:b4:c0:7b:
3d:65:63:0c:c2:18:52:c3:7f:34:ec:87:ee:f5:f0:3d:e3:61:
69:bc:14:7f:3b:5d:8e:1a:40:43:2b:ae:4a:35:51:4c:c5:7a:
19:9d:45:18:e2:ca:80:f1:c5:2c:74:ed:90:97:32:7f:71:6a:
01:47:ee:b9:94:9e:7c:32:be:7b:3a:64:47:21:81:6a:58:82:
6b:78:06:64:1f:d3:d3:e4:ea:25:b1:5b:c7:9b:92:0d:52:19:
63:55:c3:08:53:cc:68:70:bb:ef:9d:3c:ac:4f:6c:5d:a3:48:
a5:96:6f:49:d3:cf:30:50:19:ae:22:40:ba:40:4e:4c:37:23:
ec:04:64:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:22:25 2025 by rpki-client