Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
File: IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer (raw, json)
Hash identifier: wy6C5FWZXB1cJdpxjYzK9UOI3ucvGjdbjaQ7tem4sw0=
Subject key identifier: 20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444B523D5CC274C985804A2DFCEC765
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207568
IP: 2.57.220.0/22
IP: 2a09:d9c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b5:23:d5:cc:27:4c:98:58:04:a2:df:ce:c7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2d:ad:85:6d:24:16:f7:7c:03:52:74:f6:c9:
06:77:fb:24:24:de:eb:5b:10:a7:25:b5:7d:87:73:
20:c8:fa:f0:b7:91:70:fa:f5:0a:ee:05:1b:0a:12:
1e:eb:47:44:1d:62:90:c6:37:98:5d:e9:89:ef:75:
99:f9:ca:1b:30:31:e5:3b:e8:f5:1d:67:6a:50:9f:
c6:eb:cf:c3:20:35:9a:0c:89:72:e1:7a:07:b1:d1:
99:a1:58:ef:86:67:fe:1e:15:91:58:d1:c8:54:a3:
33:91:e2:16:97:af:c0:e3:fa:be:4c:2e:9b:ac:8a:
09:0b:3c:e3:5f:0a:f0:4f:5c:6d:a2:2f:25:02:46:
fd:0c:78:cc:4b:38:e9:00:c8:45:61:9f:41:81:65:
9c:d9:c9:8e:da:35:06:31:ed:17:71:60:d4:c0:60:
d3:ef:44:be:20:c8:c3:5b:0d:dd:24:2c:0e:e2:54:
15:2d:e1:da:9e:52:a9:21:3c:37:1e:85:89:09:2a:
b1:0a:4f:12:6a:c9:e8:9e:c1:5a:aa:fc:a3:27:cb:
92:9e:c7:69:b0:d6:aa:99:b7:2d:c8:d5:c4:00:18:
15:fe:d2:7e:f0:fb:28:71:cb:6b:d3:fb:f9:9a:ab:
b7:e2:27:8e:a3:24:9c:8c:0a:89:08:94:2f:55:5b:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.220.0/22
IPv6:
2a09:d9c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207568
Signature Algorithm: sha256WithRSAEncryption
a7:d6:e7:69:c2:45:e0:40:b0:fb:1b:50:09:53:b0:db:ca:b2:
04:fe:e9:04:88:e6:71:e8:f8:f6:c2:74:95:32:be:1d:20:5e:
a8:17:2c:e9:09:86:00:93:1a:fc:8e:b3:2a:f6:b0:65:aa:f1:
ba:cc:49:58:7c:9c:d3:d6:57:e9:02:bc:a4:92:b0:df:9e:88:
f3:2f:6a:5f:4f:d0:bf:bd:ca:b3:8d:c7:9c:e9:a6:7c:50:60:
ef:d2:f9:8d:4a:b5:17:b5:d2:b9:36:ca:43:55:11:f1:7e:dd:
bf:f3:ed:6f:9e:c9:c6:87:0f:88:3e:f1:2a:e2:80:9c:ef:89:
32:b8:e1:dd:c7:12:f7:c3:82:a6:27:e4:98:ce:5b:3e:f9:f6:
7e:6a:f9:88:08:e3:de:9a:0c:ec:e1:f7:36:f7:83:1e:34:b0:
77:da:53:16:2e:08:5d:45:a9:00:80:ec:46:69:cb:9e:d9:a5:
56:61:91:ff:08:93:22:a2:b3:8b:e3:65:6a:96:f1:b5:48:3e:
37:9d:2f:9c:49:e4:aa:76:8b:4e:71:71:f3:a4:92:15:40:3c:
68:91:b3:d3:44:fd:7d:7d:ef:07:52:cd:3a:79:74:61:16:8a:
73:bd:f8:e6:c2:e3:c2:ec:4f:80:9e:a1:56:1c:89:ba:d9:99:
92:7c:08:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:57:55 2025 by rpki-client