Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
File: J7irrCClmMyksS9ddV2OiTIfTsk.cer (raw, json)
Hash identifier: GidZXehwZy98RQNTnhcwaEhZvJ+FhnhvkUo+vFTa7Mw=
Subject key identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B59CEAC739A852E404B9F0FA125583
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199015
IP: 91.217.54.0/23
IP: 195.20.158.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9c:ea:c7:39:a8:52:e4:04:b9:f0:fa:12:55:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d8:40:4c:4c:99:0f:57:40:2c:58:6a:c7:c8:
6d:d0:37:c7:22:1a:ad:a7:c7:eb:b6:7f:5a:72:d8:
b4:23:9a:38:42:0f:12:ea:f7:0c:a9:e4:54:9a:af:
62:5d:36:fb:4f:4d:35:62:ad:dc:de:91:09:f0:7e:
dd:6c:d4:a4:1b:d5:1f:4b:37:e0:59:60:8b:43:c4:
96:b2:de:0a:b1:b4:82:a5:c3:43:bd:68:7a:0f:11:
ca:76:27:fa:b8:0d:57:5b:0f:59:b7:10:55:eb:7a:
de:86:88:58:b7:57:5c:51:31:70:8f:88:91:d6:f4:
98:71:e2:f2:6a:75:23:37:f5:6a:35:0d:46:8f:3a:
ad:b5:b4:b1:89:82:0b:1a:33:cf:ee:21:6a:68:18:
31:3e:04:ea:cb:30:c3:ef:1c:d4:ac:f9:4a:a8:ac:
e0:9b:76:42:a4:f5:f3:63:13:e0:50:f4:eb:2b:01:
dd:4c:1d:ae:6a:2e:7f:75:6a:64:0d:c1:70:fb:8f:
7a:b3:9b:fb:88:58:33:7f:ba:de:c6:8b:25:72:ae:
09:59:05:7c:c5:56:0d:3e:b9:87:cc:d4:93:e0:5e:
fb:13:a4:e0:20:11:9f:9a:08:d7:9c:8d:66:54:25:
48:09:58:88:50:c7:f4:32:31:16:d3:00:12:78:d0:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.54.0/23
195.20.158.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199015
Signature Algorithm: sha256WithRSAEncryption
7d:f3:bf:d9:c4:e4:78:a6:6c:79:5f:dc:5c:0d:6d:18:5c:de:
4d:fe:ce:fe:2d:47:11:16:d1:6c:de:49:54:13:75:7b:2d:57:
b5:d2:83:23:c3:d9:52:fb:25:92:92:2b:af:e2:af:f2:04:29:
2f:03:69:09:be:8b:10:4f:87:3f:c4:dc:4e:6c:01:84:fb:b4:
e6:6d:55:3f:5f:0a:b0:36:df:03:6e:7c:e4:eb:45:65:f7:c1:
6b:43:4c:5f:8c:75:8a:0f:54:1d:04:38:48:3b:f8:d1:ac:c1:
38:bb:b3:2f:05:9c:c8:f9:26:9a:ff:69:29:d3:b9:6a:e1:0d:
a8:43:7b:65:f2:44:32:a5:af:dc:8b:48:47:68:6b:98:ac:30:
62:0a:14:b7:52:8b:fd:bd:5b:ea:ce:86:68:f5:de:48:54:ae:
44:ec:91:50:87:29:97:be:b5:40:88:4f:57:9d:2b:16:4a:b3:
f7:dc:ab:4c:36:19:06:4c:71:66:aa:2e:7e:81:44:19:1a:c4:
91:ca:24:39:ca:f2:00:de:68:e7:ce:a7:7c:fb:19:e0:de:7a:
d3:31:9b:2c:86:2d:12:7a:e2:68:78:5d:a2:4d:f4:bf:c7:df:
99:41:57:58:5a:9d:45:e8:ac:51:77:96:2b:db:14:3a:ef:6b:
1b:cc:b1:96
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:43:26 2025 by rpki-client