Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
File: AkHvRDYUJQbyZZODwW69oeKbT4Y.cer (raw, json)
Hash identifier: NRf9U/i99aTW1dFpi4XUM8l60nZUgkesOysXw6MPTQc=
Subject key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422203E4162B8B89F5295B60330983CEB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31398
IP: 193.164.14.0/24
IP: 195.47.207.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3e:41:62:b8:b8:9f:52:95:b6:03:30:98:3c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0241ef4436142506f2659383c16ebda1e29b4f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:a0:85:d5:bb:38:6d:b6:71:06:f8:41:82:
3b:8d:57:45:a2:d9:6c:25:03:36:d9:ac:a3:42:0d:
6c:fd:b2:71:7a:d6:04:4c:76:1f:66:b2:45:37:0c:
9d:c8:bf:21:5f:7c:8b:c8:57:ed:ca:15:d8:6b:e1:
86:39:a6:5f:03:13:00:03:3e:a9:27:e0:d4:70:4d:
fa:97:a3:0e:5f:ca:a6:38:fc:35:af:dd:f7:e3:45:
f8:f7:ee:31:70:62:de:9d:0c:ad:e7:3a:44:cb:8c:
b7:02:9a:4a:4e:f0:19:a2:73:76:19:f6:0d:e4:b5:
af:97:d6:2b:08:a2:3d:a1:42:b4:66:47:9b:28:7e:
09:40:5d:30:88:eb:40:f9:34:21:98:30:a1:48:07:
4b:4d:6c:11:3e:d7:3a:38:a0:84:33:ad:9a:77:f6:
e2:e9:61:5f:d2:66:a6:20:2b:2a:18:4f:40:8a:ca:
18:f9:e6:3d:7a:9e:aa:13:b6:16:14:a9:af:df:0e:
50:59:c8:8c:db:3b:e3:e0:1a:c2:e2:50:f3:d4:4b:
45:d1:e6:f1:31:73:4b:72:06:80:04:2f:6f:fe:cf:
59:c3:eb:44:42:68:3e:4c:92:20:38:69:87:9c:f0:
5d:f0:87:61:78:d1:ca:05:8b:64:b0:ec:0f:fe:89:
ad:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.14.0/24
195.47.207.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31398
Signature Algorithm: sha256WithRSAEncryption
85:0a:68:84:31:5d:09:1e:ad:a4:a4:69:66:4e:ad:4e:18:4a:
13:41:a1:0e:70:c4:a6:62:b6:d0:6d:46:97:c7:5f:a1:50:75:
7a:3b:b3:1a:9c:41:f3:73:f2:47:50:4d:e8:82:00:e0:f2:e8:
39:0b:d1:9d:7f:57:a5:27:5c:a1:f5:f1:42:16:74:11:ed:27:
5a:4a:a3:6b:2d:54:cb:8a:66:55:d4:9b:9f:f3:ca:68:b6:ed:
05:45:16:51:e3:de:05:39:a6:f4:01:03:46:89:35:2f:52:ce:
2d:5c:0d:66:e3:c0:7b:21:93:ef:27:92:c1:ff:e5:a6:79:ea:
da:68:5a:53:1d:f5:99:5a:83:d0:ba:f6:32:39:fe:73:32:ef:
12:aa:16:d2:e0:f9:31:4e:e1:c6:c4:de:39:d8:82:95:66:d0:
6c:e4:a0:89:04:18:e6:07:3e:9d:2d:13:a3:c5:e9:b2:de:88:
62:6c:fd:38:65:53:1c:d3:48:6f:42:da:fb:c7:7f:e9:b6:6e:
ff:7e:d5:7c:a8:bb:22:95:50:67:49:b3:5e:6e:f8:07:d8:a6:
06:af:ab:23:ab:f5:b6:25:ba:97:3d:2b:c9:a8:45:bb:2a:a2:
7a:f3:d1:53:9f:54:4c:87:92:57:11:7b:3a:93:bc:38:1e:9c:
69:65:d9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:47:59 2025 by rpki-client