Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
File: sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer (raw, json)
Hash identifier: LmUTISw2Ez2haCa5/mLWylPOMJgiz70B/cQdNSQ2low=
Subject key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA8C20AE52737964DFB6B14D13570A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8248
IP: 81.186.0.0 -- 81.186.223.255
IP: 194.63.160.0 -- 194.63.239.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:8c:20:ae:52:73:79:64:df:b6:b1:4d:13:57:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0d62d1666c5c4d192183531584afd72bed08485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d1:f3:2d:4e:9d:c1:30:b4:6a:cd:aa:88:41:
e8:8a:b7:40:ff:bd:b1:52:01:2a:7d:65:06:39:3e:
0d:cb:cf:40:bf:15:df:63:10:64:78:c5:3f:56:d0:
b0:55:2e:ab:b5:4b:64:66:8c:e5:5c:13:2f:b1:51:
30:8a:58:52:f2:96:f4:f5:e4:2b:ed:73:a3:17:7e:
24:15:e2:74:bf:6b:85:53:3b:3e:c2:f1:47:0b:8e:
96:3f:79:46:05:d6:fa:3b:22:0e:69:ed:46:54:a1:
aa:6a:97:59:15:91:dd:27:22:79:22:cf:c1:d2:b8:
f3:98:69:66:27:dc:2a:15:f4:f9:88:85:57:fc:45:
b2:bc:f5:16:79:9d:20:57:a0:68:64:ad:08:0a:37:
6c:f6:24:37:d6:81:18:99:80:f1:73:d4:3a:b5:78:
43:5f:f3:72:b9:e4:c5:34:89:46:a2:58:22:4a:d4:
ca:bc:04:12:07:83:35:d6:1e:3d:cd:4b:96:46:1a:
9e:fd:8c:ce:e0:b1:cf:90:ac:51:a6:e3:83:ee:d3:
1c:95:1e:46:28:3e:35:9d:ad:14:2e:eb:79:51:f4:
85:ca:9c:64:11:01:38:41:1e:c5:70:0a:cb:a4:0a:
13:d9:a5:52:23:b0:bf:22:fb:20:ef:a4:98:0e:28:
3d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.186.0.0-81.186.223.255
194.63.160.0-194.63.239.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8248
Signature Algorithm: sha256WithRSAEncryption
07:7f:52:e7:2f:59:a6:f4:af:34:9f:5a:d4:0b:3b:36:8e:fd:
a6:60:20:02:4f:c2:a3:5b:f2:c8:cc:77:36:17:24:38:d0:7c:
f5:84:85:8e:ce:e0:0c:7d:83:b1:c4:83:6b:46:d2:3a:39:2c:
e6:59:3b:0c:67:e3:8d:1f:1c:ff:63:ff:b5:68:52:7c:dd:11:
27:c8:8a:fb:7a:dc:61:66:05:6d:8e:2a:ba:1c:7c:81:41:9d:
c2:3d:62:83:75:c4:e8:48:a6:96:b1:6e:ca:30:b3:a3:6d:00:
84:74:d2:ac:7e:54:0b:74:c3:12:35:d6:a3:09:76:2c:06:0b:
32:8b:dd:e3:76:a5:33:f6:14:cd:73:ff:0e:30:24:af:d6:f7:
49:4d:b0:30:bf:52:54:83:a0:66:39:6d:4d:4a:7f:e4:96:1e:
ed:5e:2e:ee:b7:ea:0a:85:4e:eb:07:ed:c7:58:af:94:eb:2e:
39:4c:b5:02:8c:c9:c3:99:5b:c1:3e:e6:99:d1:0e:37:aa:cf:
d7:4b:77:dc:b2:b8:33:b1:fe:6d:5b:d6:83:6e:8e:20:20:63:
ff:fe:c8:cc:3a:9e:8a:73:54:c3:d0:cd:e0:7a:12:ad:4e:b0:
c5:5d:fd:cd:9f:3f:c2:d8:49:c3:96:79:12:a5:33:40:e1:47:
51:7a:d3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:37:31 2025 by rpki-client