Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
File: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer (raw, json)
Hash identifier: wofWp+zm9ou3mlBSpeJmmyPMTkFhlhW5jX6Hgtw7jXw=
Subject key identifier: D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB864C219E40DAF007E3C45AB0A70C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47703
IP: 91.236.228.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:86:4c:21:9e:40:da:f0:07:e3:c4:5a:b0:a7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d977120937500eb46696428962e510e02c348e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:c2:60:52:35:25:0f:62:67:6d:fe:ff:06:
2d:04:6f:e2:2e:c7:7e:05:b1:5a:15:a3:94:21:dc:
28:42:59:40:e9:3c:14:92:63:9b:82:57:a7:88:84:
e6:6c:29:b2:69:9d:bf:30:42:e6:24:3c:d4:bb:b0:
5e:b1:5e:b0:ca:35:74:9d:38:e9:94:56:68:4a:7a:
6f:61:b1:f7:f5:4f:b9:b8:34:67:7c:43:b6:8f:25:
78:00:21:84:15:23:69:d2:68:c5:e2:df:85:f5:cb:
b1:fa:6d:86:71:16:d5:17:3e:83:6e:8b:bd:64:e5:
9b:7f:ff:96:14:d5:3e:29:da:84:d5:b2:29:97:5b:
f8:a2:30:55:f2:35:6f:4c:94:30:1f:d4:00:7b:f0:
e9:53:86:2d:cb:fb:ee:4c:d0:34:8e:84:0d:4a:6d:
9d:6f:a2:87:31:b7:d8:6e:45:f0:21:28:8d:ff:93:
72:c2:3c:0a:2c:21:f6:62:4d:0c:af:a6:38:26:71:
04:ea:f7:63:a6:f5:d0:a6:09:2f:16:f1:45:9e:21:
7e:b6:36:f0:45:64:e9:12:15:c2:34:b7:c2:de:08:
7f:cc:c4:71:e2:b4:38:9e:cc:3e:eb:db:84:c4:a7:
da:fd:de:b4:01:88:d5:d1:8d:bf:c5:56:a5:a8:48:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.228.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47703
Signature Algorithm: sha256WithRSAEncryption
7c:fb:88:2c:21:b0:34:6c:d9:23:c5:e3:52:a1:dc:16:0f:42:
06:86:f0:24:b0:4a:3a:e2:fb:a0:18:62:da:89:ad:d2:aa:b1:
a9:84:07:0c:39:2c:f2:79:10:30:c4:64:77:4d:74:19:38:be:
aa:c6:7f:75:49:13:b2:79:d9:53:ea:0d:fd:de:86:ad:eb:50:
4f:a6:e7:08:d1:08:b5:88:ee:d8:f0:52:d1:d0:0b:2a:be:70:
d4:fb:b4:c6:97:56:ba:15:15:57:5f:98:49:3e:49:3b:6d:c4:
68:f5:ab:3f:90:8d:a9:14:dd:fd:94:ef:e4:aa:6e:07:2d:fc:
bb:01:6a:41:80:6e:f1:68:ee:89:e4:28:3e:bd:fc:8c:d0:a7:
a9:80:2e:2c:a8:20:b5:06:9c:ff:39:b3:b0:bb:e7:47:56:9e:
a0:26:e9:4e:65:51:31:3c:a2:06:5a:92:f1:32:b8:ed:4c:b1:
e1:ef:18:6c:e2:df:cf:a7:6d:4e:08:bb:de:fe:84:7f:53:ee:
80:3f:68:e3:d0:42:15:96:88:66:b6:cf:21:c0:05:91:b2:73:
c6:c3:c4:de:06:52:b7:8a:c6:ff:4c:09:ad:03:85:82:cf:74:
00:76:d3:f2:39:9c:b3:b6:13:d7:c6:64:9f:33:29:73:5c:8b:
ce:14:4b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:34:57 2025 by rpki-client