![](/console.gif)
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
File: ABCrc5F2m18sVOM8i1p9-fN6M6g.cer (raw, json)
Hash identifier: KRuh5G+phCaat1MSXVMog2giiNBqgSFbVHoM/qwKP2o=
Subject key identifier: 00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC2CEA58EC0C22AF36ED566C29678A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47829
IP: 2.58.236.0/22
IP: 193.176.236.0/24
IP: 2001:67c:2c8::/48
IP: 2a09:ed40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:2c:ea:58:ec:0c:22:af:36:ed:56:6c:29:67:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:3f:27:d4:6d:a7:80:9a:85:1c:b2:87:bb:
7b:74:50:3d:37:a4:c3:0c:7f:37:29:83:35:95:00:
3c:30:ed:52:d1:c5:ca:88:89:19:ad:de:7e:c5:4c:
ea:ee:2f:2f:4c:98:0f:06:b5:b7:59:a0:f4:2c:5e:
9b:0f:b3:64:c5:d5:c9:02:44:f7:56:eb:23:ce:4f:
7f:d2:51:a5:a6:ea:e8:a0:fb:68:21:00:0f:33:ce:
05:0c:1c:62:c3:8e:f6:e3:3a:66:d9:43:64:31:0f:
da:91:ad:52:12:d4:5d:62:c8:fb:49:d3:3a:35:fa:
52:28:9e:e2:ac:75:b0:54:72:58:6f:39:c3:ce:f9:
c0:b8:57:09:7d:6f:54:a6:a2:8b:3d:22:23:2d:41:
38:1e:59:c6:eb:61:cf:0b:15:84:80:3d:d6:99:91:
97:04:9e:87:78:ad:fb:bf:08:be:a1:4a:89:b9:99:
e3:2f:77:6e:11:c8:1a:84:32:10:0c:af:bd:2d:87:
07:69:7a:b8:b8:3e:81:c0:fb:22:d6:7a:a8:eb:0c:
6c:b8:b2:20:0b:5f:d0:91:34:a0:bc:14:ef:4d:85:
3b:17:df:c3:f5:38:79:0d:16:10:3d:9b:69:74:48:
2f:d5:55:7a:5c:72:fb:77:c0:98:d3:a1:d1:0d:94:
42:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.236.0/22
193.176.236.0/24
IPv6:
2001:67c:2c8::/48
2a09:ed40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47829
Signature Algorithm: sha256WithRSAEncryption
9a:b8:b5:7b:f7:31:78:5f:2f:47:1d:ab:fe:4e:3b:1b:70:45:
87:a5:be:ba:6f:bb:61:ba:ae:e7:47:a9:51:4f:67:4a:94:55:
e5:ef:8d:54:da:bc:c4:b9:08:97:95:41:20:46:c9:a6:68:af:
58:f0:bb:2f:7d:ba:cc:5a:03:70:a7:08:b4:fa:b9:1f:41:80:
6e:20:8f:6c:51:40:df:c0:c4:ed:94:4d:e9:9f:37:26:da:66:
b6:74:b0:a5:de:d7:1a:db:2c:39:8a:27:9b:5e:42:e8:e7:a4:
77:7f:6c:97:95:ca:da:00:44:cd:60:ce:75:63:f9:eb:42:c3:
f2:9c:be:6e:3d:b1:a9:6d:bf:b3:18:32:a0:00:3a:fb:59:84:
6e:61:a6:35:a6:ad:c7:68:ce:46:59:7b:54:cf:40:10:5b:dc:
7d:ae:ed:b7:ec:10:0f:fa:3b:4b:0e:81:38:71:a7:03:0c:49:
9e:80:22:90:b9:9c:54:bf:9d:bc:30:67:b7:b3:c2:b0:6e:74:
61:c7:d6:7e:56:0f:44:8b:85:e3:61:47:69:e2:bc:84:05:bc:
89:9b:a2:41:f7:53:28:10:09:fc:2e:15:50:16:03:69:03:e6:
6f:0e:60:c3:2e:2c:95:d0:93:21:25:72:bb:31:3f:64:10:8c:
14:c0:67:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:08:49 2024 by rpki-client on console-ams.rpki-client.org