Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
File: 8d15W-NuS1swnryOBOpzlBNccUw.cer (raw, json)
Hash identifier: b5F277bvOfW5X274HMdJT1p6hoglHhj79fBNE6FdelY=
Subject key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B31B4DA493CC85B5F6099ECE30C5BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209979
IP: 194.35.100.0/22
IP: 2a09:c580::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:1b:4d:a4:93:cc:85:b5:f6:09:9e:ce:30:c5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:88:71:38:81:c3:41:6a:e2:26:3b:eb:56:cb:
7f:bd:67:65:a5:72:69:2d:b6:d5:48:e2:48:72:05:
07:71:21:85:18:97:51:9b:0d:7a:56:5a:e7:d1:c8:
55:f9:0d:53:ef:dd:48:5d:79:18:e5:c2:10:f4:ce:
95:ef:76:87:9d:e0:bb:a4:31:3b:0b:7f:a8:d9:f3:
f5:3a:c6:7c:f2:83:4f:c6:d6:d6:08:fc:c3:d5:c5:
f9:d5:18:28:55:e0:7e:48:92:15:92:d3:cc:13:f2:
f7:dc:90:44:be:9c:a4:26:16:90:fd:20:95:5e:d7:
18:50:3f:ea:58:13:69:dc:2c:a2:a3:2f:ad:58:82:
04:5c:c2:99:b8:a9:ec:8e:a3:b2:04:17:34:af:b3:
a7:31:54:2e:f5:4f:a5:aa:99:c4:25:88:47:9b:c1:
b7:3e:1e:63:83:66:e9:b3:95:51:0d:6a:4b:d9:f5:
b9:1a:35:11:ef:d9:f3:e6:97:39:24:a5:9b:78:40:
e3:a1:c9:69:e6:89:da:30:74:3e:4a:d5:ea:1c:44:
0d:54:77:41:b6:9a:cb:45:bb:9f:47:6d:3f:d9:6b:
da:39:5b:8e:52:34:13:63:15:eb:c4:02:19:a7:e3:
d9:0a:f4:42:99:68:97:c2:c8:b4:af:45:31:29:fd:
c4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.100.0/22
IPv6:
2a09:c580::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209979
Signature Algorithm: sha256WithRSAEncryption
87:3b:5f:dd:54:1d:b4:24:4f:53:19:6f:6c:27:fe:d9:0f:df:
69:b5:2c:eb:0e:9c:6a:69:81:66:a6:d4:0f:13:c3:c1:72:a5:
e7:b4:71:18:8d:61:5d:ec:3e:51:6e:0d:a9:08:ed:2a:f6:0a:
84:06:31:70:94:6e:37:f9:4d:9d:cc:5b:0f:48:66:ed:96:a1:
77:4a:f7:37:42:cb:81:38:fe:42:55:a1:21:19:93:70:03:88:
02:0d:e4:92:d4:ae:4a:83:50:7a:eb:8f:82:35:a8:a2:b3:40:
20:29:ab:37:83:49:cc:f2:2d:6c:47:57:7c:44:be:eb:b1:ad:
5f:8f:0c:ba:40:66:d2:06:64:ee:f0:5c:df:06:bc:71:47:e8:
af:a6:ed:4c:73:88:cf:be:2a:53:b6:e7:f6:95:11:99:35:f2:
dc:c5:26:6e:e5:ce:32:25:79:16:f3:d6:0c:77:be:1e:89:09:
17:4c:45:0c:cb:b6:c7:53:f5:f7:9c:84:ac:f8:86:ce:05:a0:
da:1a:23:0d:91:1b:bd:22:72:88:1a:45:e5:45:5b:ef:14:fc:
96:e9:a9:a0:8f:14:ac:88:98:07:c5:31:ec:f0:16:85:2a:d8:
85:a9:b1:09:4f:ec:5c:6e:89:00:36:94:cf:13:59:af:d6:a3:
1a:70:36:9c
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQksxtNpJPMhbX2CZ7OMMW/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWRkNzk1YmUzNmU0YjViMzA5ZWJjOGUwNGVhNzM5NDEzNWM3MTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIhxOIHDQWriJjvrVst/vWdlpXJp
LbbVSOJIcgUHcSGFGJdRmw16Vlrn0chV+Q1T791IXXkY5cIQ9M6V73aHneC7pDE7
C3+o2fP1OsZ88oNPxtbWCPzD1cX51RgoVeB+SJIVktPME/L33JBEvpykJhaQ/SCV
XtcYUD/qWBNp3Cyioy+tWIIEXMKZuKnsjqOyBBc0r7OnMVQu9U+lqpnEJYhHm8G3
Ph5jg2bps5VRDWpL2fW5GjUR79nz5pc5JKWbeEDjoclp5onaMHQ+StXqHEQNVHdB
tprLRbufR20/2WvaOVuOUjQTYxXrxAIZp+PZCvRCmWiXwsi0r0UxKf3EzQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFPHdeVvjbktbMJ68jgTqc5QTXHFMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxLzk3OWJk
Yi0wMWEzLTRkMTctODc0Ni1mZTQ0NzcyZDVhZTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvOTc5YmRi
LTAxYTMtNGQxNy04NzQ2LWZlNDQ3NzJkNWFlMS8xLzhkMTVXLU51UzFzd25yeU9C
T3B6bEJOY2NVdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCwiNkMA0EAgACMAcDBQAqCcWAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM0OzANBgkqhkiG9w0BAQsFAAOCAQEAhztf3VQdtCRP
UxlvbCf+2Q/fabUs6w6cammBZqbUDxPDwXKl57RxGI1hXew+UW4NqQjtKvYKhAYx
cJRuN/lNncxbD0hm7Zahd0r3N0LLgTj+QlWhIRmTcAOIAg3kktSuSoNQeuuPgjWo
orNAICmrN4NJzPItbEdXfES+67GtX48MukBm0gZk7vBc3wa8cUfor6btTHOIz74q
U7bn9pURmTXy3MUmbuXOMiV5FvPWDHe+HokJF0xFDMu2x1P195yErPiGzgWg2hoj
DZEbvSJyiBpF5UVb7xT8lumpoI8UrIiYB8Ux7PAWhSrYhamxCU/sXG6JADaUzxNZ
r9ajGnA2nA==
-----END CERTIFICATE-----
Generated at Sun Apr 13 23:34:49 2025 by rpki-client