Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
File: KWi04O-BBvDhKrjlAdKqTja3g8I.cer (raw, json)
Hash identifier: bUNU7KLdfxyFxZ5bMNNcA060Q9Z9BumWdS6fDUeQKAQ=
Subject key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F796A86AB4758B0FF5B6B06441FE0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214770
IP: 46.17.216.0/24
IP: 2a01:e900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:79:6a:86:ab:47:58:b0:ff:5b:6b:06:44:1f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:ac:fd:4c:a0:30:5a:e2:fa:f0:e7:8e:37:
8e:bc:e6:7f:33:6c:8d:34:4f:37:03:1b:9e:84:30:
3e:69:f6:8c:c6:5b:f6:2d:3b:5c:3e:21:42:bd:58:
b5:6b:5e:6d:dc:a6:4a:fc:5a:55:b1:42:03:36:16:
8d:48:63:fd:62:f2:4a:fb:15:05:12:69:8b:f6:45:
7e:66:f2:b5:90:b2:87:1e:a9:72:aa:5b:7a:bd:cb:
2b:90:f6:37:13:67:86:7f:2f:e6:6b:71:12:bb:a0:
55:2d:0d:80:eb:43:c5:4f:8e:0a:1d:e9:f6:79:d3:
29:aa:7e:31:c2:fb:5a:dc:ea:5f:8c:06:d6:79:a8:
82:6a:35:51:07:14:43:aa:c1:2f:73:88:77:ba:43:
2d:8d:a1:99:18:cc:7f:9c:56:2a:7f:51:ed:7d:8d:
32:e2:88:ed:5d:92:1c:01:8d:04:d6:92:5e:e8:08:
9f:23:41:04:b0:78:a8:3f:c0:75:84:a0:c6:35:f8:
9f:56:26:bc:52:81:48:eb:54:31:31:d0:8e:31:cd:
b7:f0:2d:71:b6:ec:ac:e2:4d:33:81:a6:47:96:11:
77:02:ea:80:06:fc:e6:b7:ab:74:f2:16:e2:3b:8d:
dc:26:7f:08:7d:1a:da:43:e7:9a:32:6d:87:fa:97:
6b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.216.0/24
IPv6:
2a01:e900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214770
Signature Algorithm: sha256WithRSAEncryption
40:2f:05:db:66:4a:30:45:14:40:a2:b3:52:87:eb:c6:d2:18:
8c:42:71:55:08:b3:c5:ad:48:7a:4e:1f:15:86:53:8e:09:ed:
8c:19:b7:f7:ba:8b:41:51:27:a3:a0:a4:c9:73:7a:c1:7b:04:
05:31:cc:c2:83:20:48:14:a8:c0:4a:de:61:b3:ea:ad:f0:bb:
2b:d8:29:e2:ad:2e:30:9a:ab:58:4a:c5:c6:6d:60:d9:a5:36:
8f:84:9a:5c:2f:d8:77:8f:73:2d:6a:f2:98:1e:40:4b:db:a9:
1b:39:78:d0:4f:27:2c:11:a5:0e:34:38:db:bc:d1:75:e5:8c:
bb:8c:e8:64:f2:9f:e3:a8:e8:35:83:06:6c:3f:fa:42:a2:f0:
78:54:e3:aa:a4:2e:7c:e8:6f:0c:a0:57:9d:0e:89:b0:41:0e:
b3:42:5d:1c:07:c7:0f:ec:d0:52:09:48:65:81:97:f3:2c:fa:
f8:0a:1a:8f:14:79:78:22:42:1f:29:31:f1:94:6a:da:77:be:
4e:30:b2:a9:a4:27:e8:4f:65:bd:9c:e7:69:e5:9a:07:12:02:
bd:d5:d4:0e:a4:05:f5:7a:65:a8:68:5e:0d:84:3f:95:dc:18:
0b:6e:3a:c3:88:67:6c:f8:b3:41:39:fe:0c:2d:c2:9a:03:34:
66:6b:3a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:03:11 2025 by rpki-client