Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
File: 9QVtq7mkcBDNG07ydLw9L0pZ6To.cer (raw, json)
Hash identifier: C+D/FiAa7K78NMe3heGr0/YFFM7RxXNxsN6kQy7Fblo=
Subject key identifier: F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067DFF9AC4C37CCF102C2F87556B019
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35180
IP: 85.119.56.0/21
IP: 185.115.196.0/22
IP: 2a05:4200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jan 2025 15:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:df:f9:ac:4c:37:cc:f1:02:c2:f8:75:56:b0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:56:8f:e5:b2:97:b3:38:37:73:dc:f5:ff:0c:
56:c3:3b:7f:f9:0a:78:db:dd:78:49:93:36:83:d4:
7a:e2:ed:f3:fc:42:f2:2a:55:97:61:59:6b:75:10:
2f:2b:3c:92:fe:c2:17:21:48:5b:0b:9a:1f:3c:26:
ef:c9:65:c1:31:ab:a0:8c:5e:fe:54:af:e2:79:d0:
3b:fe:fe:a1:f2:08:f0:df:7c:3f:96:f4:48:44:50:
cf:c7:4d:f0:3e:15:0c:e7:e6:6d:c8:4b:96:de:64:
82:a0:48:a7:90:71:24:f8:ff:1d:28:4e:f5:6b:37:
b9:2a:32:de:24:fa:cc:8b:52:45:4e:dd:10:df:47:
fd:c4:ea:54:26:90:17:3c:f5:15:90:02:e8:30:8f:
63:64:a4:45:2b:bf:08:c8:4f:e5:2f:13:ee:1f:00:
83:ca:5c:3d:ff:45:4e:a1:3b:8c:05:84:ab:1c:15:
16:a9:ff:af:58:bd:da:ae:a7:bf:92:c7:45:37:f0:
41:11:87:d5:d8:3f:6b:46:a9:f1:0e:b1:89:ea:b2:
4e:b0:84:da:c3:d6:67:37:a6:63:40:ec:31:34:48:
f4:bf:a5:c0:da:87:aa:49:8a:f5:0a:69:68:18:32:
e4:80:83:6c:f2:23:73:13:d0:b3:ba:1c:b5:10:70:
39:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.56.0/21
185.115.196.0/22
IPv6:
2a05:4200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35180
Signature Algorithm: sha256WithRSAEncryption
7e:09:59:21:ad:86:04:2f:ea:5c:08:1f:93:72:f4:16:e7:dc:
9a:b8:01:e7:ed:1e:79:fc:ca:d6:6e:08:43:34:59:22:71:ab:
05:ce:66:d5:ad:03:ac:f5:ed:6b:9c:6b:d3:b3:e7:34:b2:fa:
13:ed:ac:17:eb:5c:3d:ea:0f:65:f1:ed:fb:30:81:a0:7f:c4:
2a:29:54:64:10:76:d9:e7:07:16:54:6c:01:05:40:a3:23:ee:
7d:34:6b:96:25:cc:5b:51:e1:b6:09:83:90:84:1d:98:35:33:
37:9c:25:9d:b1:1c:fe:a8:da:7e:e0:df:91:dd:f9:cd:78:db:
c7:12:3d:c5:8f:0e:48:9e:bf:17:19:fd:e5:74:c2:02:f5:1e:
40:fb:bc:e5:db:2f:89:cd:4a:35:d8:03:25:bb:d0:36:bb:f2:
1d:3b:4c:be:aa:53:ed:3e:5b:7b:b8:7f:1b:b3:1c:bb:65:2d:
46:78:e3:bc:18:be:f1:b7:f7:e5:14:1b:57:7e:ad:b6:56:ae:
ec:7c:dd:b4:83:8a:64:10:b6:d7:19:2a:0b:80:2a:74:a3:5a:
bf:e6:2d:4a:ab:69:d1:22:ba:47:98:fe:e0:32:f2:95:a7:9c:
37:13:12:73:f4:c2:3e:66:86:e9:85:08:66:a2:9b:43:9c:71:
0a:13:4b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 13 21:37:24 2025 by rpki-client on console-fra.rpki-client.org