Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
File: CDC8NLj0_Lwr9SO72-mgRKJEX74.cer (raw, json)
Hash identifier: rUsb+xWdcbKAF2wcB/qMrfizqj0KUhXydD/tkJ3iwks=
Subject key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC9B5D17CCB580B621D278FB19CCBC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 62094
AS: 206096
IP: 5.154.244.0/22
IP: 185.48.80.0/22
IP: 2a01:9560::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:9b:5d:17:cc:b5:80:b6:21:d2:78:fb:19:cc:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:6b:d5:b8:13:29:95:fb:0f:4f:09:dc:dd:
97:b7:bc:92:f9:1c:ad:20:54:33:3b:58:27:3f:77:
b8:a7:d6:65:ac:4a:48:53:b8:5c:3f:88:5f:82:18:
d8:11:bb:01:16:13:d7:1e:45:f4:0b:1b:56:c8:fb:
c9:47:d7:00:af:ab:ae:58:a6:8c:fc:4f:9d:f8:18:
14:aa:2d:7c:97:93:0d:51:4e:cd:38:c8:90:0e:67:
b4:73:b9:2d:52:0a:13:11:ab:dd:0a:4a:a1:4b:e8:
c8:df:de:d6:83:42:87:cc:cd:fe:a0:9b:b3:d1:69:
fc:18:db:23:94:14:9d:64:f7:dc:d7:73:ec:49:e2:
d7:fb:c2:07:da:8e:86:db:58:f3:ba:2f:33:ba:51:
0d:b4:af:58:91:46:b7:f8:32:aa:ac:ef:60:6c:93:
bf:63:a0:8d:55:f1:61:5d:83:cd:60:14:eb:23:97:
17:c6:9b:e1:1f:3d:ac:bc:29:e6:1e:82:29:2d:1c:
2d:39:b2:f0:4b:d2:3e:8b:b8:d9:16:44:05:98:98:
77:08:fb:d1:fa:eb:a7:b1:4d:cf:fc:6e:99:bc:a7:
a7:db:68:a0:b7:29:8c:ed:0e:d4:76:f9:45:dd:08:
43:be:bf:37:f7:83:3d:19:f3:0e:44:11:9c:a7:92:
2a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.244.0/22
185.48.80.0/22
IPv6:
2a01:9560::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62094
206096
Signature Algorithm: sha256WithRSAEncryption
77:9d:50:ff:54:fe:c3:9f:f3:54:c6:0f:b5:79:40:20:96:48:
cc:1b:8f:46:28:b8:76:b0:62:c8:07:78:42:b8:be:91:62:07:
f5:20:fe:3c:14:9d:22:45:d5:23:31:54:84:7f:02:be:11:7e:
93:50:62:31:4f:00:57:e6:12:61:ae:b1:15:76:dc:ce:78:47:
62:09:89:65:ef:3c:78:c8:9d:fc:a8:ea:7c:5d:23:46:22:db:
7c:7b:dd:35:ad:d1:a5:42:2f:fe:cf:20:38:81:80:33:10:7e:
f9:4b:fc:50:12:3e:68:f7:45:d5:75:07:29:ad:e1:80:60:a1:
29:c2:db:61:5b:69:eb:dd:5a:a8:6c:7b:b4:3f:50:da:3b:24:
fc:42:b8:ae:b8:3a:c6:e6:b2:17:1a:62:98:fa:e6:9b:17:0d:
32:3d:5e:52:ac:45:4c:cc:9d:e8:5f:4d:f8:bb:93:81:b2:d1:
e3:c3:9e:a8:88:11:f9:08:7a:d4:02:cc:ba:14:92:c8:b8:e2:
44:4c:ba:ad:4d:b3:5c:9d:be:c9:66:1a:10:1c:41:0a:0a:ec:
36:2f:10:8e:24:16:0e:ac:15:06:57:56:9e:c4:08:76:2f:99:
01:1c:2c:ee:2b:7c:93:89:74:9d:67:e9:a6:b4:ce:53:34:71:
8b:f0:30:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:40 2025 by rpki-client