Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
File: K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer (raw, json)
Hash identifier: V8EsQtuARBEHjUdBXs8PrpAZqAKMdUVXIAEDypnpaT4=
Subject key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1F51699CD584ACC6BB40F4989A068
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44283
IP: 185.151.64.0/22
IP: 2a13:7300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f5:16:99:cd:58:4a:cc:6b:b4:0f:49:89:a0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:66:92:ee:04:2b:0a:35:b2:0d:a3:67:f2:
f2:c1:c2:6b:33:4b:44:39:7d:37:ea:7a:b0:93:51:
49:9f:9d:ba:d5:4a:d0:2d:21:df:93:2a:f8:69:fd:
4f:15:34:e2:e4:bb:56:05:bc:af:fc:08:d8:da:bb:
e4:f4:dd:41:bf:d9:c0:e3:8a:ab:4b:d7:7f:05:ef:
4c:3b:ba:83:e8:e4:5d:6b:8e:8f:34:74:3d:95:3a:
65:8e:74:7b:0e:e3:55:46:32:ac:77:1f:ac:6c:b7:
a8:ab:3e:d5:be:46:93:33:d5:ef:60:2b:6e:64:05:
70:84:72:ad:27:f1:dd:22:18:00:cf:b2:10:7f:40:
ab:03:0d:2d:8a:04:cb:ab:0f:17:f2:f3:dc:46:29:
15:60:46:bf:81:1e:82:d3:cb:0b:0c:9c:6c:a0:7a:
4b:e0:84:de:e1:71:1b:31:a7:18:0f:c5:1d:10:9d:
f8:34:b7:5c:c4:70:3b:11:39:2b:bf:e6:4c:70:50:
7b:64:b2:54:03:e0:42:42:e5:4d:01:c0:62:3d:c4:
cd:d4:5b:0b:20:6a:b2:c5:1a:34:bb:ed:5a:11:78:
8b:51:e5:ff:15:0b:87:93:2f:12:68:8d:36:de:df:
bb:a6:22:a8:fc:ab:40:03:1b:a5:9e:b4:7d:05:40:
13:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.64.0/22
IPv6:
2a13:7300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44283
Signature Algorithm: sha256WithRSAEncryption
63:cf:22:bb:81:ac:d5:b5:38:99:e7:99:ed:14:b6:b2:21:75:
e5:dc:8e:5a:03:21:03:63:43:55:db:01:11:e5:e0:b7:ee:dc:
ac:82:ce:02:47:64:b0:5d:10:22:fb:a9:69:e6:3f:ad:41:9a:
30:e3:85:fc:1d:8b:14:47:d4:f0:94:d8:e1:0d:7e:db:43:03:
2e:bf:c8:7c:98:84:44:0b:c8:f0:b3:f5:dd:a6:55:01:cc:b3:
37:40:ef:68:3d:d0:be:5e:a1:65:95:73:9d:05:0f:22:1c:70:
b1:93:98:87:be:1d:7d:1b:70:fb:2b:ed:31:19:4e:a6:6d:88:
28:19:8f:69:90:3b:2a:3a:e4:00:73:69:6a:17:e0:ea:66:c6:
bc:01:77:ce:07:25:00:fb:c1:92:7f:58:6e:1d:b0:c2:99:e3:
81:98:74:1f:67:c9:41:cb:04:e2:1a:2a:30:4f:3a:3c:db:a2:
f8:12:30:3e:9b:ea:09:ae:4f:70:96:f3:8f:2f:00:ef:c8:8d:
c2:73:67:73:3b:5b:47:58:2c:29:2b:fa:31:db:d3:5a:8c:82:
d2:64:97:71:d9:38:7d:6b:fd:aa:7d:8a:cd:66:c9:f1:ff:4e:
3d:6b:3d:7c:43:23:fa:86:d9:20:2e:ad:10:55:49:49:13:dd:
5e:3e:c8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:51:16 2025 by rpki-client