Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer
File: IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer (raw, json)
Hash identifier: 7AQkB/Uq0QWpPLp/2UHdPRk6h4ilZSO1XIOgEGLm6YM=
Subject key identifier: 21:53:0E:9D:09:E2:FF:8C:38:41:36:15:58:9A:5F:20:6E:7F:3E:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B360DAA548409C0C60699B7A725978
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202080
IP: 77.247.195.0/24
IP: 2a13:4180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:60:da:a5:48:40:9c:0c:60:69:9b:7a:72:59:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21530e9d09e2ff8c38413615589a5f206e7f3ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:29:49:7b:d0:07:a9:46:e5:b0:07:a8:78:ae:
dc:2c:33:9c:7b:42:71:29:fe:90:e6:31:57:47:04:
13:6f:97:bb:6f:cb:b8:95:64:a5:a0:22:ac:9e:06:
29:21:d7:a0:fa:76:f7:24:b1:66:45:98:ef:ba:b0:
20:e8:ee:a5:23:58:0b:d0:f0:07:60:2d:86:51:11:
01:c4:33:87:49:fa:22:dc:73:c7:2b:2f:a1:e4:3a:
3d:a1:64:37:18:96:56:a0:e1:a0:c7:26:7b:af:d5:
77:ba:37:a4:c2:16:55:5f:ca:db:06:bf:d1:9d:5c:
16:61:11:70:5f:fa:98:08:4d:81:18:0d:be:b1:d7:
7a:4a:98:8c:d1:55:eb:b5:21:26:a4:de:08:fa:b7:
7a:95:2d:cc:66:a4:de:ec:d6:54:ae:fe:88:ab:0f:
1b:f6:8f:2a:6f:20:3f:64:18:a7:55:4f:f0:03:b2:
fd:70:88:d4:8d:53:1d:b6:e0:a4:25:fa:8f:aa:90:
24:21:a1:22:ea:73:cb:7f:ae:1f:5e:d2:2e:d9:28:
37:f6:08:4c:4a:55:44:80:10:e7:bb:16:41:8b:48:
e4:ca:ea:f1:94:d5:ed:4d:d8:cd:4c:e8:37:c0:3a:
b6:aa:50:80:5e:9c:ff:41:1e:64:b1:3c:83:08:9e:
3d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:53:0E:9D:09:E2:FF:8C:38:41:36:15:58:9A:5F:20:6E:7F:3E:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.195.0/24
IPv6:
2a13:4180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202080
Signature Algorithm: sha256WithRSAEncryption
13:e4:46:90:b7:ea:69:60:9c:bf:96:1a:b9:63:41:58:f2:2d:
e7:f3:91:9c:70:5b:0c:52:c0:92:7f:4f:28:47:a6:2e:ce:d0:
21:b2:7d:20:cf:3a:1c:21:2b:57:8f:e6:97:f5:ee:73:b4:18:
5f:a7:c6:cc:b1:c2:13:9a:d6:36:6c:98:8b:43:3e:3c:76:00:
d6:36:c6:68:73:3b:6d:4e:1b:1f:c5:0e:54:c3:8b:c8:7d:9c:
de:15:7d:58:37:73:95:ac:06:ce:93:a0:f0:57:61:69:6e:0b:
11:a8:6e:32:0c:f0:f4:e9:89:c4:51:11:4d:da:82:43:71:83:
c7:79:e8:20:ce:8a:3d:31:da:4f:7e:c5:b7:00:20:70:9a:2f:
79:fd:a3:c6:7f:ed:e3:d3:40:1b:b5:16:58:a0:c8:2b:43:0f:
e2:51:5a:df:13:15:50:05:84:03:c4:77:d6:87:5d:f5:a1:70:
54:ab:a2:ad:5d:5a:ff:ff:fe:5d:cd:01:d1:40:b0:41:e2:45:
48:5e:6c:ce:bb:e2:3b:21:8e:7d:47:01:5e:02:67:2b:df:ab:
cd:bf:4e:fe:94:49:ca:bc:cd:7b:db:67:5d:f8:35:da:c8:72:
3e:51:63:ab:99:9a:be:66:c7:74:1c:e8:6b:cc:00:ec:4f:6f:
fe:d1:41:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:05:43 2025 by rpki-client