Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
File: AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer (raw, json)
Hash identifier: 2ctDbS8OptDR86VuUpCCInH/Sq0wZjuP1fVTB7R1JIc=
Subject key identifier: 01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258FC08637F058540B66D843CEB85248
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 139.30.0.0/16
IP: 192.76.158.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c0:86:37:f0:58:54:0b:66:d8:43:ce:b8:52:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:42:88:56:11:ff:51:c8:a7:21:f1:6d:7c:
e0:ea:dd:1b:d2:b8:56:33:f6:ab:83:80:84:6f:f0:
28:40:5a:f9:90:b3:22:ec:34:bf:e3:2a:b9:9e:6c:
24:d6:fe:e3:e0:a4:f8:d9:f1:b0:c6:33:84:a2:0b:
9c:36:96:78:25:da:d2:d4:d1:e5:de:c8:a4:c6:6d:
e8:b8:7b:d2:d1:28:60:64:d9:b7:53:9d:cd:7d:03:
72:44:ff:c4:e9:86:f9:1a:e3:f8:c7:d1:19:2d:88:
47:3d:ef:62:a2:1c:dd:2c:47:0b:f4:d2:e5:ba:0c:
1b:ca:ce:82:07:41:45:84:25:e1:a9:4f:e7:1a:16:
a6:f9:a6:7f:28:c8:00:8f:87:d2:ca:8f:a1:32:12:
0c:8a:76:cc:5b:01:6b:4b:60:a8:8a:f7:cd:b8:25:
89:7b:1a:42:5f:96:53:3d:7e:81:c5:17:60:37:21:
a1:72:8f:83:b9:50:df:1e:7a:aa:03:e9:a8:d6:a3:
97:42:cb:e3:8b:b5:3c:4e:ac:20:bc:bb:38:07:e3:
a2:8f:9f:0d:bd:f7:e2:0c:90:76:21:4f:80:f9:8d:
13:a6:f3:cc:c7:82:0c:3e:ec:22:2a:b1:c0:9c:c5:
5f:8c:b8:ae:76:22:8f:00:e7:87:fc:7b:ce:05:54:
61:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.30.0.0/16
192.76.158.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:1a:62:d3:ab:a9:5e:a2:ba:cb:e0:4a:26:da:72:d2:3d:7e:
d4:b4:bf:ce:4f:ad:15:58:cc:b1:c9:18:06:c8:d4:dd:05:ac:
f9:bf:26:2f:a9:e3:95:0b:da:9a:4a:ab:17:53:d5:e1:64:9a:
ad:d4:d1:73:f0:15:d6:a0:b7:71:ea:28:de:97:81:b8:7a:c8:
fa:af:0d:a9:4f:0d:ba:e8:ca:18:d8:d9:62:5c:08:1b:1d:e5:
2f:94:9a:59:09:9d:ef:8b:1c:de:56:40:bd:c3:af:4b:c3:9a:
9e:07:5e:78:8e:81:3e:4b:23:4b:14:88:21:07:cc:d7:f0:f2:
a8:44:85:28:7f:5c:48:28:49:f2:d2:07:98:c0:a2:a4:0a:61:
ad:5e:cd:75:92:8d:23:d9:48:cf:13:3e:c8:25:8e:70:e2:4e:
b3:27:db:a2:f1:de:01:0d:a9:b4:ab:a5:d7:d9:c8:3a:b7:a8:
09:8f:6a:84:2d:95:7d:b4:8b:80:22:66:e1:12:63:18:ae:98:
b5:d4:26:10:bf:cb:72:92:d9:19:1c:41:c6:cb:75:b8:18:83:
3c:61:eb:01:94:12:27:c0:34:4d:a9:e5:71:ab:71:75:61:1c:
a6:0d:db:b6:f5:8d:a5:ee:01:8d:7c:38:13:ee:e9:15:28:49:
33:b8:67:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:30:38 2025 by rpki-client