Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
File: 309yD7vOaxVdc1fb5xJspWwevnU.cer (raw, json)
Hash identifier: 6YlinWcZKhORS8X5J+YrJBqAnIoPpbGKJGDSo2utlzc=
Subject key identifier: DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019519036074B2691DFC152896B69B5E8F74
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Feb 2025 12:23:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47642
IP: 91.208.76.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:03:60:74:b2:69:1d:fc:15:28:96:b6:9b:5e:8f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 18 12:23:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df4f720fbbce6b155d7357dbe7126ca56c1ebe75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:18:0d:b6:d1:ac:b9:25:75:78:4b:a4:cf:
b2:e4:cb:5c:70:7a:69:e9:21:4d:30:64:ef:23:95:
69:0c:d2:f3:78:4a:eb:3b:d8:5f:f7:00:a0:fe:e7:
67:c6:f3:1d:7b:19:d4:c5:e2:b3:4f:df:13:8e:a2:
35:51:97:11:18:7e:4f:fa:a3:dc:2b:39:d9:41:16:
0c:e6:f9:d0:05:f7:99:1f:c4:b1:45:c0:be:91:c9:
83:de:aa:15:d3:c6:fd:47:d3:c9:11:1a:a3:25:5b:
59:b1:a9:60:46:1a:71:61:11:4f:66:a0:45:f9:a1:
1f:57:c6:af:92:3e:c4:d3:0a:75:ec:84:2d:83:aa:
fe:48:2a:2d:95:c6:06:a2:f5:d9:f3:16:d2:92:18:
44:62:24:2f:a8:c2:0e:10:5f:51:07:02:e0:42:be:
7f:47:e1:fa:ad:2a:00:ea:9c:c6:d6:fd:bd:a5:ee:
91:77:c9:03:a6:c8:86:6b:0f:31:ab:40:b8:7b:78:
02:50:4c:79:b1:14:b5:22:0d:3f:ef:53:40:6b:34:
3b:07:e5:ae:5a:4f:67:9d:b4:e7:c6:2b:11:e2:15:
a0:2c:f6:94:06:b4:4b:d7:1b:b7:9e:44:a8:6d:49:
37:65:94:e0:de:8a:9a:64:7e:31:12:1c:aa:fa:f3:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.76.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47642
Signature Algorithm: sha256WithRSAEncryption
5f:1a:e3:4c:86:9a:c0:3f:89:73:37:df:6e:e6:0d:77:d7:c6:
49:d3:cf:ff:9e:41:e1:68:01:af:a3:1b:dd:7e:d8:b3:dc:d2:
00:9d:d2:f7:e9:fe:1b:a3:cc:38:b9:75:c7:21:9e:ab:4b:ab:
38:5c:6e:30:e1:2e:65:fe:a0:8e:b9:f2:a3:12:84:fd:99:fc:
99:8c:e0:3a:68:8e:06:67:ca:26:80:c7:d1:c7:7d:f8:b6:5e:
74:f0:de:c5:d7:37:7f:57:14:6d:50:51:d0:76:83:79:d9:e6:
d9:3b:1f:b6:f5:66:d3:a6:28:e1:01:bf:07:b8:0f:10:a3:ec:
00:2d:b4:b9:8b:86:f0:4e:29:88:49:c7:df:44:1f:9a:a8:94:
d0:cc:a2:ae:09:92:52:a9:4b:d1:f0:36:ee:65:83:4f:a2:a0:
fa:a8:e9:95:af:55:57:c3:f7:bb:43:7d:3b:28:bb:ea:64:f2:
89:a6:02:66:51:c1:bd:91:46:4d:66:eb:32:cc:09:af:7b:23:
3c:7a:99:9e:49:a0:97:be:fb:27:8f:98:ed:23:1d:2e:c5:be:
a2:f6:4f:12:fd:8e:98:e5:6e:21:8c:e8:ab:6a:e3:e8:a2:93:
08:88:1a:2f:eb:7a:2a:8f:11:29:d3:df:bc:5a:28:08:1a:14:
81:c7:c5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:09:16 2025 by rpki-client