Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
File: sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer (raw, json)
Hash identifier: cpbzwWiaxVHnQtTUaJgYDweR2PE/Kb6tC5kW76d6O9I=
Subject key identifier: B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5E6F46357CE6D346E0831BC758493
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 38919
IP: 89.190.140.0/22
IP: 185.92.68.0/22
IP: 185.132.108.0/22
IP: 2a05:f080::/29
IP: 2a0e:f800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e6:f4:63:57:ce:6d:34:6e:08:31:bc:75:84:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:b0:7f:80:ba:0f:d5:6f:80:2e:c2:72:e1:
79:e3:ce:91:94:38:a9:67:83:31:35:ab:9d:26:a2:
e7:c5:61:28:7e:37:50:04:a8:84:70:dc:74:98:52:
47:b7:1a:95:ff:3e:26:be:19:e7:da:5c:be:08:fe:
09:72:cd:90:db:79:45:92:18:e0:b1:cb:3f:d1:64:
55:f0:28:f6:b4:3b:55:e4:03:ee:81:7f:f9:08:c1:
d9:ac:68:8a:56:e1:2c:8c:c0:57:db:22:2d:c0:ba:
03:f8:d1:a3:2b:b7:10:78:f1:a4:19:6f:cd:71:b7:
3c:5d:77:ea:de:9c:b0:45:42:79:2e:b6:cf:b9:e9:
59:7b:b2:72:81:ee:b1:44:6d:b3:9e:61:8f:b1:4f:
80:97:61:91:29:85:69:9b:ad:3c:8d:05:fb:d4:dd:
a7:4b:b4:b1:df:95:70:5d:d4:04:5e:c9:f1:ee:14:
10:3f:67:83:5b:7b:0b:a1:05:fd:d4:b7:df:f2:63:
9d:c0:e0:44:09:e4:4f:81:f0:80:f9:75:28:6e:5c:
76:43:01:94:65:1c:e4:cc:de:40:60:35:72:4b:40:
e1:08:30:b8:a7:89:c8:dc:16:33:99:f8:d8:96:32:
6d:dc:f1:70:10:22:2f:50:46:a9:54:b3:63:93:ad:
bb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.140.0/22
185.92.68.0/22
185.132.108.0/22
IPv6:
2a05:f080::/29
2a0e:f800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38919
Signature Algorithm: sha256WithRSAEncryption
a8:31:9a:4a:16:5b:f1:25:d0:8f:53:d5:20:51:68:22:39:87:
96:d5:83:cb:d8:10:d9:3a:05:26:46:43:5b:c4:c7:98:fd:b7:
ae:be:d6:d0:bf:05:12:b8:0c:0a:71:bd:2e:3e:e7:a2:ec:a1:
3f:b7:75:30:ce:91:ff:86:3e:2e:74:de:86:03:13:62:56:47:
86:ae:fc:11:9c:4a:93:a4:da:19:4e:44:35:6b:a7:09:5b:e7:
80:a3:a5:ec:30:38:7a:68:db:a2:b9:62:a6:39:04:94:82:68:
90:0b:c9:97:61:ee:e7:44:1b:9e:2a:e3:ec:b2:28:de:73:24:
fa:3b:ca:10:48:ac:a9:ec:09:41:5f:9a:e9:c2:43:4c:47:59:
c2:db:55:52:9d:2b:7b:fa:a6:3c:bc:f9:3c:b4:7d:10:2c:ca:
98:83:a3:ba:97:65:17:24:13:0b:c0:dc:80:c9:87:78:f2:74:
0e:53:04:40:14:76:77:72:93:87:87:0c:28:8f:6f:ed:0c:d2:
6d:da:60:ff:f4:c4:50:ac:59:29:0a:6b:39:b6:76:11:12:c6:
5d:e2:db:37:99:e7:1e:ed:8d:1b:96:ca:47:68:79:05:11:b7:
16:95:20:87:02:3a:20:28:25:68:71:59:58:00:50:f3:4b:1b:
09:fb:e8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:37:38 2025 by rpki-client