Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer
File: J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer (raw, json)
Hash identifier: Bnv0xfPbfeWANmnSEkEVdvpFQ3R2YNwbEx3tCvRoymo=
Subject key identifier: 27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194A233C0D7E9CC13C4731C97DC064393B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 26 Jan 2025 10:41:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212855
IP: 93.157.140.0/24
IP: 2001:67c:f8c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a2:33:c0:d7:e9:cc:13:c4:73:1c:97:dc:06:43:93:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 26 10:41:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27851163005f59c06e35a8fd365f96356eb34971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:8f:5d:ba:84:ac:6a:2c:19:06:b4:dd:54:
79:43:b0:c1:63:41:dc:f8:75:09:f3:dd:ff:df:9b:
49:76:a6:82:fd:67:73:a2:74:05:5b:36:32:81:c1:
b4:bd:8c:3f:b1:b1:b6:cc:d4:c3:15:58:73:a4:23:
cb:dc:28:83:62:bd:44:7e:0e:da:16:97:49:de:d8:
ba:06:75:ab:4c:99:a1:c5:e0:be:8b:d9:a4:c3:db:
85:aa:b0:92:3b:b9:11:ec:0d:d4:58:f6:68:b0:54:
54:39:d4:b7:50:3f:ac:f5:98:db:6f:81:43:3c:05:
fa:53:7e:5f:f3:7c:70:f6:22:3e:6a:ea:a8:8c:64:
f1:26:a1:94:1e:7a:09:90:05:47:55:f8:2b:90:68:
0a:24:97:e0:32:a1:02:b4:7a:04:59:5e:a2:20:d2:
f6:4f:0b:39:4a:b2:e3:41:21:ae:28:34:f3:1d:e0:
d7:fc:4a:a6:7f:02:f4:5d:49:50:69:5c:4b:12:9f:
e2:22:64:9f:dc:01:d9:e0:4c:e9:ac:b4:a2:b2:e4:
6c:f5:ff:10:bf:f5:bd:17:c2:2d:b3:32:44:ad:09:
f5:59:3a:a3:61:82:8f:24:0d:35:14:d2:9c:a0:6d:
12:da:63:4e:57:53:6a:e4:3b:f8:77:1f:dc:17:a8:
63:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.140.0/24
IPv6:
2001:67c:f8c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212855
Signature Algorithm: sha256WithRSAEncryption
3b:9f:e6:cf:56:32:e2:b9:28:49:71:44:84:1c:e0:66:ce:48:
c7:b2:a7:37:25:79:f6:f5:63:81:9b:28:83:b2:a4:34:24:74:
89:ea:c3:0f:bb:c2:87:44:74:e2:b9:2e:9f:97:27:dc:f4:bc:
df:f5:81:2a:8b:38:18:9a:29:f2:b0:2c:20:53:03:37:d6:da:
e6:d9:19:02:cb:96:80:f6:ef:9b:3a:2d:74:45:c3:cd:6e:e2:
aa:f7:4f:76:c0:a0:e7:fa:4c:3c:a5:27:3f:b8:67:9e:85:fe:
4d:83:df:90:e2:65:78:9b:68:99:6c:94:02:a4:0c:bf:d3:0f:
bf:df:29:db:48:ec:a1:8e:fe:fe:52:88:30:a6:a7:38:35:12:
e1:74:34:b8:76:8a:dd:b5:52:3e:dc:32:7a:ef:65:62:31:7c:
f7:36:db:91:c7:7f:c3:04:6b:eb:74:0c:1b:86:c4:d4:91:bf:
25:23:e7:6f:eb:aa:d4:1b:d4:73:12:f3:06:ef:aa:cd:14:ea:
3e:34:8b:2b:7a:5a:b8:36:35:74:df:e7:df:4a:59:75:37:7e:
eb:dd:24:84:92:3d:05:b1:da:30:4c:32:63:e7:72:cc:23:10:
bc:48:75:91:c2:52:ac:97:85:6e:d6:aa:a3:3e:71:b7:60:d4:
36:04:48:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:50:29 2025 by rpki-client