Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
File: Igqw164Bx7p9pp1xqRRys5DNcJE.cer (raw, json)
Hash identifier: sFN+4G4tGL3LUX/vmIutzyFqXAvXoHvL80jdNnZ3VH8=
Subject key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F97CDD7A8C4C5F3410853E2778D3A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209427
IP: 45.66.88.0/22
IP: 2a09:6640::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Mar 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:97:cd:d7:a8:c4:c5:f3:41:08:53:e2:77:8d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:d5:25:0a:b6:f1:eb:f8:80:10:ae:b7:0d:
e0:d3:d6:b0:90:36:71:09:92:79:db:fc:8b:62:b8:
7b:6f:dd:bd:6c:99:1c:ee:b7:b4:64:1d:26:10:2f:
b2:2f:75:c8:45:a4:e4:73:97:26:6f:9b:40:36:45:
45:d0:3c:62:a1:b2:46:13:60:96:49:cc:9c:b9:71:
b7:3a:5a:1b:21:50:b1:37:17:25:67:bb:4e:b1:f4:
fe:4d:b8:f0:ca:10:52:a4:72:4c:31:06:ea:f0:3a:
5c:98:bf:14:09:0a:35:44:10:9d:ae:2c:ff:0c:35:
b8:64:c9:23:94:c6:0e:9d:2f:ac:e4:cb:ac:b0:bf:
bd:ea:d9:61:8c:81:e6:b0:ef:b4:27:d7:26:a5:a4:
54:a9:01:c8:88:1b:8a:2d:f3:da:4b:f9:ac:15:f5:
2a:fa:54:b7:2f:84:de:0b:a2:a9:47:dd:e0:f0:a3:
89:32:0e:17:85:0a:c2:fb:b4:59:21:fb:94:5b:1f:
ad:4a:f9:72:97:f9:97:a7:0b:7f:84:a5:76:6d:cb:
36:8e:0b:17:13:42:cc:3a:e7:04:ad:67:21:c7:87:
eb:b1:e2:21:dd:35:63:4d:cf:10:19:a1:71:3d:62:
2f:0d:3f:b4:92:b5:27:0f:03:5c:84:81:2b:ec:c3:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.88.0/22
IPv6:
2a09:6640::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209427
Signature Algorithm: sha256WithRSAEncryption
42:a3:f2:46:b6:e5:61:d0:a2:55:35:ff:67:57:35:a7:5e:84:
b2:db:2c:58:4d:bd:0c:b0:1d:86:5c:58:a5:63:16:e8:fb:f1:
e3:82:36:34:67:81:4e:20:fa:2a:89:5a:e3:6a:ba:09:40:40:
42:c1:2c:b4:d9:07:1a:46:1d:71:b1:52:4a:ad:d1:b0:0a:57:
83:fd:b0:4e:5d:f5:c1:e6:fe:22:1a:99:26:21:0a:92:c1:42:
a0:7a:9b:9a:76:90:ee:47:fc:0c:5c:4f:10:7e:86:f2:51:8e:
88:bc:56:12:41:1d:04:ec:62:65:d0:9f:2c:b2:d4:ba:1e:81:
13:7f:ae:b8:49:2f:6c:2e:30:d1:8b:83:2a:7d:34:5d:f5:fb:
d3:aa:21:36:c9:95:10:85:b6:99:3c:70:c2:54:52:c6:ce:70:
af:bb:3e:e1:68:eb:81:80:52:65:07:3c:9c:5f:4f:c6:fe:31:
e7:2e:8f:ca:b1:34:3b:bd:b1:8b:1e:2c:10:1e:ea:75:8b:2f:
de:3a:89:7f:4d:82:ff:0a:bd:d4:03:38:10:d9:c5:f9:91:0d:
5d:b7:d0:45:a7:ee:90:80:82:1d:41:6a:ee:66:64:7a:a8:d2:
66:14:eb:62:bb:fb:df:3a:94:8f:ef:5c:32:c9:11:4a:a1:e0:
9e:e9:9f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 22:09:46 2025 by rpki-client