Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
File: E82HAn19OjuffEukSV5J4hrVpLs.cer (raw, json)
Hash identifier: D7O7x522MIshPOR99FiEwK4oKeSAv0LHATX0ouMeEp0=
Subject key identifier: 13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA3A2BC5844A88362449B68141D4B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211756
IP: 185.242.178.0/24
IP: 2a10:98c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3a:2b:c5:84:4a:88:36:24:49:b6:81:41:d4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:0c:3f:0d:24:70:46:45:0c:ce:6e:8c:01:
26:47:d1:5c:af:0b:80:ff:1d:dd:3d:76:e7:ab:f3:
b4:c3:c3:ef:1c:f3:b5:4a:ef:1e:74:df:64:b5:8f:
64:2b:87:44:4b:34:a8:d8:dd:cc:ce:fe:23:41:25:
dd:4e:2f:b1:89:27:6e:16:27:15:fe:40:64:0f:d8:
bf:04:e5:b7:fb:55:fd:f1:eb:1a:a5:a0:e2:a2:05:
5e:40:44:aa:44:38:df:d7:f7:e6:eb:77:20:55:b9:
c7:2f:1e:29:7f:09:ca:16:67:53:c3:36:02:38:fe:
37:05:e8:80:34:55:84:56:fc:8b:81:14:a5:95:4c:
1e:c5:f4:2f:03:95:23:4b:58:74:c5:c5:c7:9c:4d:
43:b8:d4:de:e1:49:3e:e0:42:ff:e2:6d:fe:71:77:
d2:1b:41:af:05:30:1d:bf:34:b3:fd:7e:84:bc:a2:
4b:e7:8b:50:f4:d5:4e:b0:69:d0:ba:aa:9a:90:03:
73:c9:84:19:b1:ec:a6:fb:6c:b1:d4:ea:06:4d:8b:
9e:d1:33:4e:8e:7c:1a:91:31:99:d6:2b:c9:9c:d3:
33:ba:8d:be:fc:0c:c5:0a:95:54:df:21:8a:9b:6f:
e3:38:56:89:e5:02:ad:c1:bb:84:52:4c:78:d0:13:
04:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.178.0/24
IPv6:
2a10:98c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211756
Signature Algorithm: sha256WithRSAEncryption
ad:b9:a2:12:c4:5c:60:c4:8d:8f:cf:77:a3:1c:5a:2d:50:39:
47:83:f1:c8:25:3a:a2:52:48:a6:b2:5a:69:ea:04:9c:30:14:
b9:4e:ad:bd:9c:01:86:d8:38:bf:c1:8d:15:e2:a2:87:21:36:
43:8c:f9:29:eb:ab:11:d6:a6:ee:72:38:79:b2:85:78:df:d0:
43:88:72:69:b5:fd:e8:b7:df:f3:7d:77:dc:0f:dd:95:25:b7:
1c:49:83:bf:47:34:b8:35:89:4f:03:c2:80:0a:18:b4:87:42:
08:c0:aa:08:e1:6b:33:50:43:c4:46:18:4b:14:11:2e:ca:d2:
b1:bd:fe:06:e3:5c:9a:40:87:62:18:ed:40:2c:19:3e:3b:c0:
28:b3:75:b7:c4:bc:24:73:ed:4d:dd:81:3c:f1:8a:c4:07:10:
dc:17:e9:44:81:c3:1f:0a:04:1e:fb:d2:07:5d:bd:52:11:96:
2d:c1:48:92:66:4e:54:c5:cf:3c:8c:64:1d:b2:37:95:ab:e8:
49:bb:72:ec:26:c5:e2:a2:6d:83:51:0a:78:c2:9d:c3:57:00:
d1:42:1b:15:f7:19:a5:b0:3e:c0:b3:e8:7e:41:c7:82:e6:12:
0f:66:2d:2f:b8:9e:95:b2:f4:0e:67:03:d5:73:03:10:a3:16:
74:c7:8e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:04:22 2025 by rpki-client