Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
File: 1-SB1W_Z7p9e009ABAnYE6imyPtE.cer (raw, json)
Hash identifier: zXB/hBNXyHuzltBh9Ove5XzmBxh+GooSK92viv5z6OE=
Subject key identifier: F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D8995CD34349FFC1F5C386E59CDE8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204179
AS: 207150
IP: 109.74.24.0/22
IP: 2001:67c:2658::/48
IP: 2a0d:41c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:89:95:cd:34:34:9f:fc:1f:5c:38:6e:59:cd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d9:75:df:68:8a:7a:e5:95:9f:c4:58:10:3a:
29:cf:ba:e3:58:7a:67:8d:3b:e6:65:78:1d:97:c5:
aa:9a:7c:f5:d4:05:5c:3c:16:cf:94:d5:60:4f:9e:
4a:b0:80:0c:19:49:42:70:4f:4c:a9:12:f5:eb:ce:
4f:43:4c:11:63:fa:a9:9b:69:f1:d1:6d:78:2e:43:
e7:59:76:b6:cf:d4:2b:85:47:90:3c:24:29:05:1a:
98:c4:3b:f7:63:0c:ef:dd:2d:e0:49:74:b8:78:ba:
db:54:71:c0:92:46:30:79:0f:5d:a9:a7:25:d5:e7:
21:08:04:ef:82:11:90:cb:8a:6c:bb:96:a8:65:36:
07:16:47:e9:12:d3:32:45:08:eb:fd:41:b4:fe:a7:
25:2e:57:9b:5a:79:51:7c:f4:65:70:58:ad:fe:70:
f2:f8:c8:f2:b5:11:ef:36:6f:59:1a:78:5f:2a:8f:
39:93:f6:72:88:09:d9:e4:be:46:c4:0b:5e:4d:be:
4f:e9:c2:6a:ea:b6:ca:d4:11:4c:da:35:ae:15:44:
ab:2b:9f:c8:73:ac:c4:2b:d9:4e:b4:cc:ad:f5:da:
b2:58:02:89:f2:73:52:ea:f7:00:60:b6:a5:48:32:
0f:27:ca:71:44:77:26:4b:4d:8d:0e:18:86:58:a1:
27:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.74.24.0/22
IPv6:
2001:67c:2658::/48
2a0d:41c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204179
207150
Signature Algorithm: sha256WithRSAEncryption
51:61:11:57:f1:1d:1d:19:b7:29:3e:24:2d:f2:87:88:bf:21:
60:18:bc:1e:39:6f:e8:56:37:63:56:02:94:dd:38:09:86:30:
f2:20:c8:1e:5a:11:e7:8b:38:ab:e8:21:d4:df:ab:94:86:c1:
f5:bf:07:d8:f8:76:f3:ce:bc:c9:04:8e:23:86:27:15:c0:5b:
1e:e2:fb:a8:08:0d:00:26:36:4a:a7:11:d1:db:fd:9f:74:22:
b2:c2:0f:ac:dc:9e:26:a2:59:24:11:60:d9:be:ce:ea:22:1d:
ad:bf:51:ca:7c:1e:c3:c3:da:a9:8c:1b:f9:8d:1d:c9:10:2a:
f2:61:f7:dd:e2:ff:37:f4:62:43:40:b7:2f:29:09:1d:74:10:
5d:ed:2e:aa:be:75:01:9a:52:e7:fa:12:ec:9c:5c:c4:6d:80:
38:f4:b0:3f:d8:68:e6:38:d9:00:ff:65:d9:1c:73:41:65:eb:
df:f8:d2:7d:f0:d0:7f:65:90:48:cd:02:1a:55:da:dc:b1:2d:
91:70:4a:a7:39:a3:a8:4d:04:b3:2e:4f:fb:76:06:e5:36:06:
01:f2:6f:1a:28:7f:a3:bb:43:6c:82:1a:62:be:5a:89:05:b0:
0f:63:7c:dd:93:e2:b5:2b:3b:3c:e4:72:c8:35:1d:0e:14:ed:
8c:61:96:8c
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgISAZQijYmVzTQ0n/wfXDhuWc3oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTIwNzU1YmY2N2JhN2Q3YjRkM2QwMDEwMjc2MDRlYTI5YjIzZWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtl132iKeuWVn8RYEDopz7rjWHpn
jTvmZXgdl8Wqmnz11AVcPBbPlNVgT55KsIAMGUlCcE9MqRL1685PQ0wRY/qpm2nx
0W14LkPnWXa2z9QrhUeQPCQpBRqYxDv3Ywzv3S3gSXS4eLrbVHHAkkYweQ9dqacl
1echCATvghGQy4psu5aoZTYHFkfpEtMyRQjr/UG0/qclLlebWnlRfPRlcFit/nDy
+MjytRHvNm9ZGnhfKo85k/ZyiAnZ5L5GxAteTb5P6cJq6rbK1BFM2jWuFUSrK5/I
c6zEK9lOtMyt9dqyWAKJ8nNS6vcAYLalSDIPJ8pxRHcmS02NDhiGWKEn0wIDAQAB
o4ICvjCCArowHQYDVR0OBBYEFPkgdVv2e6fXtNPQAQJ2BOopsj7RMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0LzZiN2Mz
ZC04NGNjLTRjNzAtYmM2Zi05ZTU0NGQyNDZmZDcvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvNmI3YzNk
LTg0Y2MtNGM3MC1iYzZmLTllNTQ0ZDI0NmZkNy8xLzEtU0IxV19aN3A5ZTAwOUFC
QW5ZRTZpbXlQdEUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEF
BQcBBwEB/wQoMCYwDAQCAAEwBgMEAm1KGDAWBAIAAjAQAwcAIAEGfCZYAwUDKg1B
wDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDHZMCAwMpLjANBgkqhkiG9w0BAQsF
AAOCAQEAUWERV/EdHRm3KT4kLfKHiL8hYBi8Hjlv6FY3Y1YClN04CYYw8iDIHloR
54s4q+gh1N+rlIbB9b8H2Ph28868yQSOI4YnFcBbHuL7qAgNACY2SqcR0dv9n3Qi
ssIPrNyeJqJZJBFg2b7O6iIdrb9Rynwew8PaqYwb+Y0dyRAq8mH33eL/N/RiQ0C3
LykJHXQQXe0uqr51AZpS5/oS7JxcxG2AOPSwP9ho5jjZAP9l2RxzQWXr3/jSffDQ
f2WQSM0CGlXa3LEtkXBKpzmjqE0Esy5P+3YG5TYGAfJvGih/o7tDbIIaYr5aiQWw
D2N83ZPitSs7PORyyDUdDhTtjGGWjA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:40:43 2025 by rpki-client