Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
File: ESmtAUBy3mYXQ4-xr75BotvcgRw.cer (raw, json)
Hash identifier: TLRREOyPy4fQxw9FDHn+w9AjVEUPQAC/z4e6eRLCxao=
Subject key identifier: 11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7C75E9962CBADC18D91379F58FD95
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208346
IP: 217.198.186.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:c7:5e:99:62:cb:ad:c1:8d:91:37:9f:58:fd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:a2:82:f7:39:e6:ed:1c:08:e9:29:9b:17:
8d:1a:fe:73:2c:f6:08:73:0e:ce:d4:18:b0:aa:d8:
77:e1:20:12:1b:2f:6f:60:89:f4:73:81:d6:26:32:
92:3b:b7:40:93:cf:c1:ab:b3:31:31:a1:41:1a:a4:
78:a4:65:46:e3:8e:a5:7c:bb:e3:45:70:e8:33:bb:
09:b5:67:32:db:ea:bc:74:be:ce:56:08:1d:d8:7b:
e0:74:56:d3:ed:a2:fa:f8:b6:c7:2f:b8:6b:32:1f:
2c:a3:9b:b3:d7:72:b1:2f:eb:ea:5f:b3:6c:df:44:
4b:db:ed:99:95:3f:3f:e3:58:0e:82:f8:e0:68:a6:
74:95:43:31:49:f4:d0:c6:98:40:6a:09:c7:ef:5f:
9b:08:34:38:e8:8b:4e:ac:77:00:2b:46:14:37:c8:
e5:e7:41:93:ac:d0:2d:ca:be:cd:80:88:82:4a:f8:
5c:40:13:7d:72:d0:62:bd:8f:fd:14:8e:b9:8e:19:
0e:47:a3:97:9b:e0:9d:3b:2a:3e:09:82:5f:a8:b5:
9d:d7:8c:ba:8d:5c:2e:44:01:a7:2b:9e:ec:0f:79:
5c:72:73:1c:9e:39:50:ba:f1:72:56:f0:86:80:a8:
19:24:04:28:5b:b6:8c:63:e7:cb:14:c4:38:ee:ff:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.186.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208346
Signature Algorithm: sha256WithRSAEncryption
0c:cf:44:04:13:0e:4d:b4:57:9c:3d:98:36:3c:e6:e8:91:64:
bc:54:87:eb:d9:a4:92:b2:13:d6:35:7b:ce:6b:dc:9a:19:cb:
7b:68:e4:52:22:72:14:bd:4e:e4:e3:29:4a:fd:b4:9e:11:e6:
e3:03:ce:58:0e:4e:32:90:33:b4:c3:df:70:9e:0a:4d:5d:59:
93:d7:d9:4d:c2:c9:d3:8f:3c:45:de:6b:a8:ab:69:9d:b9:56:
ed:87:8c:6a:10:d2:ea:47:77:66:f9:c3:94:f9:5a:45:ca:12:
97:c9:17:1a:34:9e:7a:96:5e:9b:59:70:3d:3f:dc:41:fd:19:
b4:fd:56:f9:e8:89:dc:12:99:3d:3c:4f:11:fd:c3:cc:bd:be:
8f:ba:4a:0c:be:cf:37:e6:0a:87:65:cd:3f:73:60:50:27:8b:
89:c1:7d:40:4d:c3:52:74:d6:e9:f4:81:c9:70:57:27:cc:7e:
d0:f6:c9:78:b6:2f:c3:35:80:98:dd:13:1b:1f:f8:bd:1d:47:
3c:80:99:97:83:cc:5f:79:01:c3:a5:75:b7:70:54:50:f7:b2:
11:0c:db:e1:e6:9c:e3:49:c3:ff:28:17:cc:ee:da:25:cf:a3:
5c:d0:ef:11:fb:a3:bc:3a:e1:ab:76:5f:c7:31:3c:bc:ed:78:
c7:7a:58:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:36:25 2025 by rpki-client