Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
File: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer (raw, json)
Hash identifier: lF1yZRKBrMZWWa+76R11NeId/mPt25QP8j+lLO/jax0=
Subject key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423699046DE148C6E9FA52BAF90B443D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 5416
AS: 15539
AS: 209752
IP: 77.69.128.0/17
IP: 82.194.32.0/19
IP: 84.255.128.0/18
IP: 88.201.0.0/17
IP: 89.148.0.0/18
IP: 185.165.176.0/22
IP: 193.188.96.0/19
IP: 217.17.224.0/19
IP: 2001:1a40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:90:46:de:14:8c:6e:9f:a5:2b:af:90:b4:43:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d7:a5:6c:64:20:3e:3f:19:38:f1:e7:b3:a5:
8d:bd:7c:96:4d:e7:39:7c:bb:1f:02:40:ec:1e:a8:
02:e9:c6:43:f9:d5:d3:29:b8:91:91:50:56:6a:42:
b4:83:02:cf:36:fe:79:60:03:6c:99:ab:1b:77:a2:
28:35:98:1c:ab:fb:38:d3:af:f6:ee:b4:be:92:3b:
02:20:8e:ff:5b:5f:8f:48:d8:88:74:ab:90:43:5a:
2a:70:99:08:b0:a1:ed:43:29:21:d9:60:e4:c7:15:
56:0c:a2:0e:5c:34:a5:0c:7b:14:d3:1e:a3:cd:c1:
df:1b:cf:cf:90:50:32:e5:c7:13:26:6a:e3:e4:8a:
39:04:2e:e4:a7:ea:6c:ad:cc:03:8c:13:d8:6c:06:
fd:ff:90:94:77:c8:00:03:d4:be:54:80:09:23:b2:
b6:e1:67:1d:bb:aa:ee:c8:a2:2d:51:5a:8f:0a:7b:
7d:fc:3c:0d:97:60:fe:13:26:38:fe:8e:1e:90:e0:
15:02:bd:32:b7:4b:06:7c:9b:8c:4a:b2:ba:16:bf:
ca:ef:05:3a:83:49:5c:b0:4b:d1:c3:41:1a:e6:f5:
d0:49:ec:b7:3d:4d:21:01:2a:fb:45:59:e4:c2:7f:
ed:8a:36:d8:50:47:aa:b6:e6:ee:96:b1:08:c8:c8:
2d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.69.128.0/17
82.194.32.0/19
84.255.128.0/18
88.201.0.0/17
89.148.0.0/18
185.165.176.0/22
193.188.96.0/19
217.17.224.0/19
IPv6:
2001:1a40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5416
15539
209752
Signature Algorithm: sha256WithRSAEncryption
65:2b:11:85:46:9d:d4:bf:2f:c3:07:25:61:be:19:eb:37:ef:
77:02:eb:e4:58:3d:1a:24:65:60:30:af:6a:18:d9:b9:ff:3f:
9a:9d:8b:73:dd:80:fc:e9:7d:89:58:f3:63:2a:76:be:db:71:
9f:4c:21:d0:74:61:70:f2:69:36:2c:5e:20:b8:a6:ec:2d:29:
f0:80:0c:16:02:1e:67:88:fa:b3:20:a9:fb:dd:5b:5c:56:56:
3e:c7:2c:96:cb:7d:d6:2e:bf:d7:19:0b:22:d7:67:f0:a5:38:
16:fe:ff:db:45:83:38:46:cd:2f:b0:c2:10:cc:58:9a:80:0c:
9e:fd:7e:65:15:d0:26:08:12:5a:a6:da:94:bd:1d:16:50:dc:
7f:d1:ad:71:9f:57:ba:8e:09:bd:f2:57:e2:3d:c0:e6:7b:f5:
54:a2:82:6b:c3:b8:a3:2e:ff:53:2b:79:9d:65:2e:d2:90:60:
a6:5f:7b:bd:16:04:8a:5e:fa:e0:9e:66:8e:80:6b:fe:84:57:
09:c6:47:8b:48:cd:03:75:e3:b4:ac:ea:27:c1:d9:fc:37:0e:
d3:2b:63:1c:8f:27:17:e7:a4:5c:fd:3d:9c:4c:d8:fe:70:2b:
c6:97:c6:4f:ad:7a:b1:76:4b:7a:57:43:5c:0b:da:0d:7d:23:
00:75:81:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:08 2025 by rpki-client