Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
File: IOuvVUyRRowQUkuvdC6ksaXQtJw.cer (raw, json)
Hash identifier: vKr9VyVdk5OX1+JhkUMR0lQOPJctuhocygrLWs+5Xsg=
Subject key identifier: 20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D610149C4D9463179DBBE33E140A23
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212834
IP: 2001:678:de8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:10:14:9c:4d:94:63:17:9d:bb:e3:3e:14:0a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:e3:06:b2:e3:d5:72:3f:f5:c5:e7:24:c6:
6f:ad:e4:0c:7b:3e:39:1b:d1:3c:42:b6:0b:2e:58:
46:cb:77:7f:00:d9:42:2b:6a:17:88:01:f5:18:2b:
c3:14:12:5f:2b:ae:cd:2f:ff:c8:a4:09:f6:da:81:
d7:57:b9:fe:ba:51:41:5a:7c:62:c4:0f:89:cf:dd:
76:1a:6f:9f:5a:a0:fd:35:17:f6:d9:fa:f1:75:59:
fe:4a:35:39:1c:fb:0f:f9:7c:ca:01:76:8d:ff:c5:
0d:7f:59:34:4f:93:57:dd:ed:31:14:8f:f9:a4:79:
ff:21:d5:ab:90:29:88:be:d0:98:13:d8:b5:46:90:
57:4c:74:46:dc:0a:5f:eb:42:ed:3d:22:c6:3b:02:
0b:56:4e:d6:8f:df:63:c7:3d:66:66:be:5d:4b:03:
fe:1b:24:03:d8:70:10:55:8e:0c:c6:7f:0a:77:04:
56:fe:de:d5:fd:6a:f1:6c:30:09:0b:2b:3e:f1:81:
34:e2:47:0a:45:79:a7:6e:5c:ae:5a:98:d3:3a:34:
0b:44:32:d1:b4:83:37:73:ec:5c:f6:03:32:d7:a6:
f1:65:ce:6a:56:2e:67:b4:d3:35:09:37:30:df:7c:
d4:8c:2f:f9:b7:c6:af:17:96:c3:f3:87:91:3d:71:
e5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:de8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212834
Signature Algorithm: sha256WithRSAEncryption
76:30:2a:96:0b:90:b6:d5:be:aa:2a:bb:c2:23:0c:27:4b:85:
52:f5:83:2d:a8:29:a4:bf:6f:19:e0:48:1f:c3:ad:6c:b5:56:
24:b8:e1:f1:45:2a:52:bc:7a:b0:ca:31:d2:1d:ca:5a:9c:31:
cb:6d:32:f8:07:ce:99:ee:2b:48:bd:13:9f:4e:e9:d9:37:32:
72:e2:b3:2d:4e:6c:4a:88:e0:f1:eb:37:17:bc:1c:c3:fe:dc:
d2:09:5b:5c:52:8c:12:d6:3d:5e:72:b9:48:3d:1c:cc:ed:3b:
4a:35:2d:97:8c:f7:e0:93:4b:3c:ef:a6:ab:b3:fd:b4:a6:c5:
ec:07:38:c2:9f:a1:6b:df:0e:b3:fe:d6:1a:29:9c:ee:db:9e:
47:21:84:4f:be:ce:61:ac:a8:dd:f6:94:84:8e:e1:6a:d9:aa:
01:7b:8f:97:0a:bc:1e:cb:6b:8a:9b:30:4a:a4:54:75:b6:17:
19:0a:3a:1f:4f:ca:da:25:b5:65:89:19:ec:d3:64:d9:a7:2c:
40:da:1f:e2:d7:b2:9f:f3:f3:a4:8a:a7:ae:48:12:b8:75:88:
10:73:ff:23:e1:cc:ff:9a:03:c4:06:8c:ce:62:c1:e4:84:7a:
ca:10:ac:cd:1a:3d:ff:1c:e4:47:55:e9:63:de:00:fc:32:c8:
29:b3:7d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:21:47 2025 by rpki-client