Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
File: 15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer (raw, json)
Hash identifier: bv6wIbEH9Dwq3oOC9/Zp6bGUBua6GSkDd3NugnyCWJk=
Subject key identifier: D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D727B8DB719A534DFB58D825663AE4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34330
IP: 193.43.77.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:27:b8:db:71:9a:53:4d:fb:58:d8:25:66:3a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d795a7259f9537186493f482d55cef4b64b1c435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:85:08:6f:24:b4:97:94:03:38:1e:9a:c1:
d1:9e:a7:a3:8d:57:b6:c6:b0:21:34:c2:df:2d:bd:
63:1e:c4:1c:17:26:84:57:c3:23:ef:32:1b:88:b8:
75:7f:2d:d7:e4:27:ea:7e:39:e7:79:a9:c4:ee:77:
68:c4:a4:24:17:f7:b8:46:da:9b:0f:00:43:c9:f9:
16:91:7a:61:49:7c:38:2e:4a:43:c9:da:62:fe:9b:
cd:f1:a0:c3:d3:93:a8:41:d2:83:4b:3e:4d:ef:b7:
f9:79:60:88:03:56:a8:a4:25:ab:aa:bd:87:b5:cd:
d9:91:1e:4f:4f:74:75:d0:60:38:8b:45:ea:48:f3:
f4:df:51:53:18:11:7d:a4:d5:7e:6b:9b:e0:06:e5:
de:10:73:d1:92:dd:d5:ee:44:7b:69:2e:d1:40:bd:
ad:bb:05:ae:11:f0:ee:01:b9:13:a6:e4:fc:80:3c:
53:1b:8b:2c:e1:49:df:53:04:68:fc:1e:8f:37:9d:
7d:b0:72:fe:f1:77:9b:38:94:75:f8:3d:d9:6e:f4:
66:33:73:b6:98:8a:e4:36:fc:2b:2e:1f:1d:cb:c7:
f9:df:62:aa:77:10:a4:a7:e5:e2:d2:52:fd:da:1d:
44:85:41:7f:1c:e7:10:a6:9a:b8:5d:96:85:74:95:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.77.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34330
Signature Algorithm: sha256WithRSAEncryption
04:cc:e6:5c:38:80:ea:1a:10:e5:4e:41:5f:00:6f:dd:6c:e3:
42:59:ce:d3:77:9f:10:20:02:dd:55:47:45:c4:8a:da:c8:b6:
66:61:ea:21:38:a4:b8:a5:47:70:20:12:3e:41:26:ac:ad:52:
1e:9a:aa:c3:c4:c5:50:5f:e7:ff:88:6b:26:cb:00:e1:d9:24:
a6:4a:bc:eb:cd:50:c8:3e:2b:fa:e6:be:a5:c4:bb:db:94:2c:
ac:86:bd:6f:2c:67:04:49:d6:41:31:27:d1:30:77:f5:0b:57:
66:e1:63:37:53:59:bf:2e:fc:53:1f:e1:6c:04:8b:69:d7:44:
05:ca:eb:d7:87:4d:2f:49:8a:3d:87:4d:e0:ab:3d:31:9b:a6:
6b:19:21:05:f7:ae:5f:69:bf:f2:5b:d1:09:97:98:15:23:3e:
87:69:b2:d4:65:5c:22:42:d9:1e:bf:98:bb:2e:3b:83:4f:f0:
7b:a9:00:a0:a2:01:e2:58:8c:60:8f:cd:4e:a3:84:3a:50:90:
b1:39:11:e4:ba:59:6f:52:48:0f:34:ca:fc:0c:97:3b:e2:a3:
57:8e:1d:0e:9f:28:47:0a:e0:c5:f3:8c:91:16:2e:b2:81:bf:
d7:0a:8d:73:d4:0a:4b:53:f0:9b:bc:6c:e5:b8:a1:e0:3b:90:
d1:40:da:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:15:19 2025 by rpki-client