Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
File: K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer (raw, json)
Hash identifier: AGqFYn2L/g6CVCRTImUOMkBHDzqXo3dJHsC4V1Ue054=
Subject key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258ED2564B85C4338A57E237D6400607
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 196827
IP: 185.23.216.0/22
IP: 2a00:5d20::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:d2:56:4b:85:c4:33:8a:57:e2:37:d6:40:06:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:73:de:19:71:bc:85:7b:30:cf:66:ae:26:
cd:fa:1a:7e:60:88:24:e7:4c:f0:7a:34:f1:e9:5e:
13:13:23:a9:23:e0:a1:e8:5a:ed:99:a4:d1:92:a3:
40:04:45:b9:6e:91:28:60:d8:63:3b:0f:6d:d6:9c:
11:e6:c4:eb:60:05:5f:63:0d:43:b0:70:89:96:2c:
84:0d:bf:33:38:56:56:64:90:29:1d:99:2b:62:12:
52:cd:a1:e4:2b:c8:63:3b:b5:e2:32:b3:16:72:45:
c1:74:de:c5:07:e3:c5:44:e6:16:1d:42:74:91:01:
a2:8e:7f:a5:76:07:c7:e7:12:aa:66:eb:11:72:f3:
1b:0e:14:4c:a9:8d:f3:1d:c4:6c:d6:44:26:4f:42:
9c:62:9c:3b:34:d4:a9:f6:15:e3:e2:45:b7:0d:05:
13:4e:60:e7:be:b0:fc:51:bc:4c:ea:28:00:35:1e:
1c:dc:13:59:60:50:4c:d1:b3:c2:ed:39:41:03:33:
73:73:5d:15:ac:c3:14:37:7b:b3:a7:07:0c:60:45:
12:a0:d9:cf:b2:08:d4:c8:35:97:bc:07:a2:46:ab:
17:23:35:f5:d8:b7:b2:f0:db:bb:6c:38:77:08:96:
1d:82:5d:a7:05:fd:1d:62:bb:7b:49:7d:44:6f:b6:
65:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.216.0/22
IPv6:
2a00:5d20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196827
Signature Algorithm: sha256WithRSAEncryption
76:2d:00:9e:75:be:b8:31:a4:83:45:a3:dc:81:89:66:1e:3c:
44:61:c1:89:b8:ea:21:5b:6f:8a:7e:55:4b:93:e4:9b:0a:90:
9b:71:3a:4b:2f:7b:30:d6:ce:a1:08:4e:19:09:66:4b:75:8f:
9a:24:ae:c2:c1:da:ff:dd:3a:d5:8d:ad:09:60:a9:7d:d8:63:
a0:d5:bf:72:8d:c2:66:9f:9b:9d:b2:d7:ce:3c:a7:74:47:c5:
89:fa:ef:a6:d5:35:01:c5:61:33:9c:08:46:a4:02:5e:35:6e:
eb:5c:a2:37:2a:73:4f:7e:73:8e:bc:9d:25:70:39:c6:c9:51:
47:47:08:d0:9f:e3:72:96:f5:8f:e3:e4:dc:42:f5:28:67:c9:
fe:9c:0f:73:a6:a0:f6:2c:39:14:58:23:9a:b8:8b:6d:49:e6:
5f:76:a9:dc:46:d4:17:5d:57:9d:6c:96:58:d3:0d:82:c7:75:
87:9e:f0:22:f2:b1:84:72:0e:7d:9f:2e:f9:d5:7e:50:d1:5f:
7d:f3:77:63:b2:b2:81:a9:24:a1:81:80:2a:af:d3:b7:1b:1a:
1f:d3:9a:da:be:02:ce:76:60:1f:57:3f:40:44:a1:32:a4:cb:
db:31:84:09:d4:1d:87:8e:f7:06:ce:a5:d7:2e:80:5e:6e:09:
db:7a:14:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:01:07 2025 by rpki-client