Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
File: 1-RqCIwAuMSTluwboLU9go3m5Pc0.cer (raw, json)
Hash identifier: FdaxaOzwvBO1LEyBG3HGgMLaCgR5jJKkZFSDZZX77vA=
Subject key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143DA61FD6C27188AF262CAC1376F51
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211734
IP: 185.147.136.0/22
IP: 2a07:3780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:da:61:fd:6c:27:18:8a:f2:62:ca:c1:37:6f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:56:a2:ac:bd:bc:05:5e:90:32:27:48:a5:
85:6e:a8:e4:39:61:a9:a2:f9:89:c0:e2:b5:45:12:
0b:00:11:4d:54:78:9a:cb:1a:b5:74:ce:9c:5d:4e:
6d:41:be:90:5d:ac:25:a8:31:b1:bf:62:44:da:50:
50:63:d4:9f:cd:f7:3b:62:a8:49:15:b7:ed:16:8b:
fd:ff:50:a9:a8:1a:96:71:8c:74:ab:7a:82:14:a2:
a1:15:c2:f2:da:4b:fd:cc:37:ed:43:e8:11:28:c5:
11:09:43:ab:f9:72:23:7e:ca:5c:38:99:5f:c1:cc:
f1:da:a8:c7:e8:33:b3:b7:a1:6d:91:9c:ad:5f:2e:
ba:44:bb:11:eb:b2:aa:5d:a6:5b:7e:4b:f5:3c:45:
e5:a5:42:55:07:12:6e:3e:9a:14:6b:03:12:fd:cc:
6a:b4:bc:9d:d2:ea:86:66:c1:ae:dc:9e:74:0a:9f:
0e:e4:c6:00:dd:e4:fb:b2:54:c1:97:34:0a:41:29:
b9:18:e8:0b:77:62:4e:c3:1d:fc:71:a4:eb:7c:50:
77:d0:ca:1a:68:6b:a6:30:48:37:a5:6c:ae:fa:fe:
f9:67:99:cc:4c:fd:74:c3:94:98:a6:32:54:a5:73:
93:9f:db:94:d6:3a:98:52:85:e5:fb:02:0f:a6:38:
d6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.136.0/22
IPv6:
2a07:3780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211734
Signature Algorithm: sha256WithRSAEncryption
09:c0:e4:7f:fd:3a:00:74:8d:4c:8a:b8:6f:5b:f5:48:67:53:
59:45:c2:ef:13:6d:6d:98:8d:1b:b7:94:4a:b3:13:02:c4:fb:
c8:81:54:0b:74:c9:d4:ed:1b:cb:57:9a:6f:0a:a4:a6:8d:4f:
dc:91:5c:f2:4e:45:97:ca:f5:f8:b8:f1:7d:a2:d4:92:01:2e:
e8:5d:e7:67:48:4c:b5:52:68:63:7a:58:e9:71:d3:79:82:85:
a0:1f:34:3d:dd:03:c7:2c:9f:8f:c7:da:97:04:cf:0a:51:39:
7e:37:fd:07:bc:a4:16:ae:79:17:20:32:dd:f1:8c:60:31:8f:
cc:74:53:90:7b:04:a7:ab:3e:d5:b2:3d:48:75:d7:36:2d:3e:
2a:83:24:c0:15:69:c9:6e:2f:87:af:2f:b2:05:2b:aa:6e:62:
54:33:d4:3b:11:bd:d5:08:cc:f6:b9:d2:62:7c:93:32:83:d7:
13:00:c9:b2:cf:bf:ad:4c:00:1f:61:aa:6c:08:f8:70:b2:71:
c3:4e:0b:8a:8c:5f:28:ad:ff:c6:2a:ba:d9:46:19:19:0c:ce:
09:51:80:ca:29:f2:38:e4:39:9e:60:13:7c:97:44:eb:40:a6:
10:a7:80:30:64:a6:1d:96:3d:52:d0:b2:92:72:48:17:0f:56:
d2:91:f6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:39:27 2025 by rpki-client