Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
File: A8nqT5ZYixa9T8o41MHd9lwav9o.cer (raw, json)
Hash identifier: zJoLE7bx1IirALjqLRS7qO14hYcMVEN1p0oIdLXdMrw=
Subject key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194547F74DEE1BAB91794BC675EC5456C06
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 11 Jan 2025 08:33:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39928
IP: 91.213.149.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:54:7f:74:de:e1:ba:b9:17:94:bc:67:5e:c5:45:6c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 11 08:33:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2a:d1:b1:4c:23:3c:7a:6f:82:b4:84:58:12:
65:4f:fa:3a:f6:c9:97:55:97:6d:9d:46:90:a4:15:
9e:d6:c4:74:08:16:13:73:9c:69:d3:f5:a6:36:e2:
4c:4b:39:51:f4:85:6d:ac:08:0e:1c:f7:22:09:38:
17:86:08:1e:a2:10:78:d5:26:56:b5:7d:76:7c:b8:
e0:16:30:c8:ca:58:87:53:f6:e6:9b:dc:81:24:b0:
4a:7a:56:d3:df:fb:16:63:b6:7b:10:3f:ed:79:55:
cd:8c:af:a6:99:66:28:6a:f1:22:46:c4:4e:2d:53:
57:34:d4:bd:74:be:29:04:9f:09:97:bd:ec:5d:c2:
20:bb:44:bb:ee:4c:72:26:b2:89:9b:68:cc:ea:ad:
4e:d9:c3:36:b4:ba:9f:52:6d:54:d6:30:da:4d:3d:
ad:f2:13:4a:44:6e:ca:4d:0d:bf:bf:8a:a0:72:b9:
83:23:ff:f1:7e:8c:ca:20:81:ac:e9:f3:44:9b:5e:
a4:4d:b1:0e:1d:b5:0c:58:77:52:4f:00:50:b9:33:
de:a4:95:11:a0:01:50:cf:9f:fe:fc:c6:26:bd:62:
4a:b5:81:fa:99:37:ae:e8:64:1d:c3:a8:c8:cd:87:
2a:6a:c2:17:6d:c0:a2:18:25:27:95:91:d2:1e:9b:
72:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.149.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39928
Signature Algorithm: sha256WithRSAEncryption
26:f2:23:1c:0a:7c:c2:46:44:97:3d:f6:cf:4c:36:c2:0c:42:
27:71:75:32:da:82:45:41:fd:e7:4c:d3:48:80:ac:ba:22:ae:
a2:39:1d:92:81:df:44:d9:8d:6b:f1:ee:91:5e:b6:e0:f8:9f:
08:8e:4f:ad:e3:36:14:30:a6:05:3d:d9:fc:d2:4b:71:32:5f:
66:5a:fb:90:d7:47:01:1f:db:55:b9:82:0d:cf:b1:77:24:a3:
14:0c:c6:64:34:29:38:0c:7d:4c:c6:fb:a7:12:33:c2:22:41:
23:1e:58:5e:87:d7:ac:d4:34:8d:91:5b:c1:ae:6c:4a:15:1f:
e7:90:ee:ea:a5:7e:20:6d:30:0d:aa:41:df:43:b7:90:08:5e:
93:78:ba:2e:68:66:cf:cc:30:ec:76:3c:a3:3f:02:5a:e6:8f:
e4:63:03:74:d3:d8:bb:28:2a:b5:85:58:6a:65:d4:b4:b2:ec:
5a:e7:39:3b:94:ea:df:c9:f7:61:f3:ca:4e:76:d3:e8:ec:db:
6f:dc:27:15:31:67:3c:66:f9:5e:84:4f:b9:f6:01:fb:fd:65:
b6:79:07:bb:3d:42:e1:bd:c8:0e:82:cb:02:7b:e2:07:d6:c9:
fc:75:8f:ab:0b:72:b7:6f:5d:66:d8:7e:11:dc:89:4d:c6:6d:
76:dc:be:f9
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZRUf3Te4bq5F5S8Z17FRWwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTExMDgzMzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2M5ZWE0Zjk2NTg4YjE2YmQ0ZmNhMzhkNGMxZGRmNjVjMWFiZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSrRsUwjPHpvgrSEWBJlT/o69smX
VZdtnUaQpBWe1sR0CBYTc5xp0/WmNuJMSzlR9IVtrAgOHPciCTgXhggeohB41SZW
tX12fLjgFjDIyliHU/bmm9yBJLBKelbT3/sWY7Z7ED/teVXNjK+mmWYoavEiRsRO
LVNXNNS9dL4pBJ8Jl73sXcIgu0S77kxyJrKJm2jM6q1O2cM2tLqfUm1U1jDaTT2t
8hNKRG7KTQ2/v4qgcrmDI//xfozKIIGs6fNEm16kTbEOHbUMWHdSTwBQuTPepJUR
oAFQz5/+/MYmvWJKtYH6mTeu6GQdw6jIzYcqasIXbcCiGCUnlZHSHptyVwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFAPJ6k+WWIsWvU/KONTB3fZcGr/aMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxL2U3ZDBm
MC1mNDgxLTRmZTMtODY3Ny0xY2QzM2M2MmM0NWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvZTdkMGYw
LWY0ODEtNGZlMy04Njc3LTFjZDMzYzYyYzQ1Yy8xL0E4bnFUNVpZaXhhOVQ4bzQx
TUhkOWx3YXY5by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9WVMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCb+DANBgkqhkiG9w0BAQsFAAOCAQEAJvIjHAp8wkZElz32z0w2wgxCJ3F1MtqC
RUH950zTSICsuiKuojkdkoHfRNmNa/HukV624PifCI5PreM2FDCmBT3Z/NJLcTJf
Zlr7kNdHAR/bVbmCDc+xdySjFAzGZDQpOAx9TMb7pxIzwiJBIx5YXofXrNQ0jZFb
wa5sShUf55Du6qV+IG0wDapB30O3kAhek3i6Lmhmz8ww7HY8oz8CWuaP5GMDdNPY
uygqtYVYamXUtLLsWuc5O5Tq38n3YfPKTnbT6Ozbb9wnFTFnPGb5XoRPufYB+/1l
tnkHuz1C4b3IDoLLAnviB9bJ/HWPqwtyt29dZth+EdyJTcZtdty++Q==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:15 2025 by rpki-client