Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
File: 9-VkfNC39yK-1FafN7i_j5JTjPU.cer (raw, json)
Hash identifier: W70OfLLidwwcnkw4BX2CvoPdLWgA6dUZZjY7dlCqAX8=
Subject key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067C4F56455D99E45D409DE4ABD2EE8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50354
IP: 193.106.64.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c4:f5:64:55:d9:9e:45:d4:09:de:4a:bd:2e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:a4:2d:e8:bd:61:79:bd:3c:04:df:02:7a:
1f:55:7e:f5:51:24:01:ed:ba:e9:f7:8a:29:cb:7d:
34:79:2f:e5:a1:93:21:1c:99:22:55:13:75:2a:f3:
67:0a:27:70:5c:2d:3b:5b:4e:d3:b0:69:5d:df:5c:
65:90:ef:fd:7c:72:cd:7c:80:ca:50:20:0e:1e:55:
34:4b:bc:73:f7:fe:7d:10:df:7d:78:c2:8a:ae:31:
b1:31:86:96:1e:ce:c0:98:3b:9b:d5:db:8e:e5:4e:
47:4f:6d:64:ce:cd:2d:60:e6:75:f6:72:11:e9:dd:
14:6d:71:18:70:e6:6c:c7:3f:c5:db:de:70:42:f2:
b6:93:f8:a7:b4:45:c7:d4:c3:c4:10:1d:d0:4d:89:
57:d7:a9:f4:1f:5c:8e:c2:94:ce:f3:63:11:3f:b4:
0f:a1:c2:f6:90:bb:14:ed:90:d4:e3:48:04:a0:52:
f1:cf:6f:d5:7e:0e:ba:82:6c:1e:81:b8:b2:6d:e3:
43:20:fd:60:99:2d:ce:f4:ee:b8:3e:d2:ed:4c:a6:
1b:93:4e:c2:23:27:8d:32:e9:4c:28:0a:2a:47:13:
09:a8:dc:d3:37:68:fb:90:f8:be:49:f6:9a:41:f9:
2f:f8:b7:63:b0:30:18:39:cf:07:0d:f3:82:06:ae:
cf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.64.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50354
Signature Algorithm: sha256WithRSAEncryption
24:7c:24:6e:e3:76:69:98:36:03:8b:ff:fa:b7:83:86:0c:63:
d4:a0:d2:85:11:82:71:36:bd:51:4d:c1:91:9d:72:58:f0:48:
1e:ea:e2:8e:7c:9b:fa:c2:23:a1:cb:48:2a:ca:d8:14:73:e5:
36:b2:32:a4:55:0f:48:bc:30:eb:22:a1:4b:ac:5c:a7:4b:b8:
85:67:72:a7:95:09:93:30:74:9c:54:8b:4b:88:94:54:48:69:
b8:13:56:4d:71:09:77:35:8e:2c:16:b5:7f:8f:a1:74:23:42:
8e:75:78:f1:9c:1b:3d:70:74:5f:33:5c:04:b1:e2:db:d8:0d:
97:a0:7b:9d:a7:ae:6a:ab:cb:1c:c2:bd:7d:83:06:3d:bd:25:
12:98:1f:7c:0b:77:ae:51:72:8d:57:8f:49:9a:5b:cb:55:9b:
d8:ae:72:9b:10:0a:c3:be:cc:72:ef:37:ac:fc:aa:db:87:31:
e9:a9:27:fb:97:53:89:e9:58:e3:e7:03:99:3d:75:2f:02:bc:
db:76:90:79:e0:0f:92:eb:d8:12:6b:f6:c4:90:18:c2:91:a3:
9f:bc:26:ab:a9:55:a6:0e:24:7b:cc:4c:5d:d1:ff:80:fd:e3:
c2:5b:67:d5:a4:c0:ba:c7:0f:61:b4:65:60:36:15:ba:cc:db:
db:b4:9c:54
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQgZ8T1ZFXZnkXUCd5KvS7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2U1NjQ3Y2QwYjdmNzIyYmVkNDU2OWYzN2I4YmY4ZjkyNTM4Y2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfqkLei9YXm9PATfAnofVX71USQB
7brp94opy300eS/loZMhHJkiVRN1KvNnCidwXC07W07TsGld31xlkO/9fHLNfIDK
UCAOHlU0S7xz9/59EN99eMKKrjGxMYaWHs7AmDub1duO5U5HT21kzs0tYOZ19nIR
6d0UbXEYcOZsxz/F295wQvK2k/intEXH1MPEEB3QTYlX16n0H1yOwpTO82MRP7QP
ocL2kLsU7ZDU40gEoFLxz2/Vfg66gmwegbiybeNDIP1gmS3O9O64PtLtTKYbk07C
IyeNMulMKAoqRxMJqNzTN2j7kPi+SfaaQfkv+LdjsDAYOc8HDfOCBq7PQQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFPflZHzQt/civtRWnze4v4+SU4z1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzL2Y5MDgy
Yi1jYmEzLTRmYmMtYWRhMi1kZjA2Mzc2N2MzZjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvZjkwODJi
LWNiYTMtNGZiYy1hZGEyLWRmMDYzNzY3YzNmNi8xLzktVmtmTkMzOXlLLTFGYWZO
N2lfajVKVGpQVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCwWpAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDEsjANBgkqhkiG9w0BAQsFAAOCAQEAJHwkbuN2aZg2A4v/+reDhgxj1KDShRGC
cTa9UU3BkZ1yWPBIHurijnyb+sIjoctIKsrYFHPlNrIypFUPSLww6yKhS6xcp0u4
hWdyp5UJkzB0nFSLS4iUVEhpuBNWTXEJdzWOLBa1f4+hdCNCjnV48ZwbPXB0XzNc
BLHi29gNl6B7naeuaqvLHMK9fYMGPb0lEpgffAt3rlFyjVePSZpby1Wb2K5ymxAK
w77Mcu83rPyq24cx6akn+5dTielY4+cDmT11LwK823aQeeAPkuvYEmv2xJAYwpGj
n7wmq6lVpg4ke8xMXdH/gP3jwltn1aTAuscPYbRlYDYVuszb27ScVA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:47 2025 by rpki-client