Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
File: CjMvWtwEaVM7vdz86JV-ruWL_WA.cer (raw, json)
Hash identifier: 4mwHvaVo0/ep92VSODZzSTjE3AL36MrkKph4HGd8bUk=
Subject key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266ADA795F42B5898511BCED421D2051
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:48:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 20546
IP: 80.90.0.0/19
IP: 91.236.122.0/24
IP: 185.5.80.0/22
IP: 2a02:cb40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:da:79:5f:42:b5:89:85:11:bc:ed:42:1d:20:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:fa:cb:a3:21:90:be:ab:ee:3c:c4:18:64:
b4:b9:2e:0e:c9:60:79:42:08:b4:c1:f3:20:ba:a6:
07:2b:62:95:19:7c:e7:fb:f6:2b:51:cb:f1:5c:64:
66:43:cf:76:cc:a8:aa:81:46:6f:08:75:a9:bc:a4:
15:45:75:44:d8:ef:cb:47:60:67:9e:c4:4e:76:68:
1e:5d:83:69:32:ec:b5:da:95:54:60:df:58:bc:c3:
c9:40:b8:68:dd:50:a3:cc:8e:55:58:c3:55:a2:f1:
40:df:80:95:95:ab:83:c9:fe:8b:fd:d7:37:89:80:
82:1e:c0:9d:3d:96:1e:9f:da:07:aa:84:75:8b:7e:
bb:79:68:2a:b8:f3:9d:c4:da:c1:f5:54:44:ab:5c:
bd:ab:cf:70:36:bb:d1:1e:fe:19:ae:a8:ff:4c:4f:
4e:d7:c1:a6:b5:80:2b:b5:25:a5:a2:c7:b9:e7:f5:
78:e5:95:a1:8f:f4:a3:08:a1:af:8e:10:09:60:8e:
f1:89:75:28:fa:de:31:19:b0:98:2f:33:71:b0:ba:
e2:5b:ed:05:3b:00:7b:b8:ec:93:9a:17:dc:96:2e:
a1:b3:e7:a7:99:33:e4:59:7e:30:50:3e:0d:27:48:
d0:75:14:02:d8:17:5b:7c:4b:7f:17:f3:42:24:14:
27:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.0.0/19
91.236.122.0/24
185.5.80.0/22
IPv6:
2a02:cb40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20546
Signature Algorithm: sha256WithRSAEncryption
01:78:1c:ad:50:fd:b8:e6:5c:b8:fc:f0:11:67:58:bf:38:d1:
4e:30:11:10:d2:69:75:9b:f9:5e:ce:af:00:b5:fa:32:46:c6:
3f:6a:61:36:5d:c0:04:98:78:df:14:d1:d2:cb:df:46:8a:03:
3f:f4:9c:84:b7:6d:5d:07:be:d9:20:33:34:c2:d7:e7:21:b0:
62:a8:4f:59:6d:2d:90:5f:93:3b:52:2e:49:e2:f5:59:ec:a4:
eb:d5:1b:ae:ef:7d:3c:f5:12:37:30:75:5a:2f:49:f1:3b:2b:
cb:12:bb:b2:7e:4f:ce:05:3d:9b:cc:6c:c5:90:ad:5b:85:22:
cf:9e:50:35:fe:cd:82:71:9b:ef:47:53:c1:3f:7e:09:6b:7e:
5c:88:e5:16:2e:de:b8:11:b9:a1:53:fe:60:80:ac:55:51:52:
82:dd:50:00:66:c2:8f:d3:57:4f:6c:63:1d:4a:9d:8c:26:1f:
f7:fe:5c:3c:63:5d:f0:31:a2:cc:6b:17:37:b5:63:82:59:74:
cd:20:1d:d2:f9:c9:41:f2:aa:11:be:44:23:29:b9:79:cb:4d:
46:7f:71:68:d2:8b:da:ce:71:5b:5e:b4:dd:00:ef:52:cb:ec:
44:5f:db:b1:42:77:83:ed:e7:50:ce:58:1a:35:05:e4:e9:d1:
1b:c8:48:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:09:04 2025 by rpki-client