Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
File: M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer (raw, json)
Hash identifier: JNHHO4VaccPCm1ur5KIX5qZgtKlKiMVws/muFLJnYD8=
Subject key identifier: 33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C6BA1B2BE32F367DA5A441342B590
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44741
IP: 92.39.144.0/20
IP: 2a07:b840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6b:a1:b2:be:32:f3:67:da:5a:44:13:42:b5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33bb8fccc6d6ab72ba5294b09985de799ea06348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:cc:8b:40:75:a4:a7:c0:73:9d:e1:b8:4d:
95:d3:e3:d3:58:e5:87:a3:33:5c:36:10:cb:d6:36:
9b:89:e4:a6:b8:f6:8c:73:87:19:88:b0:a5:17:02:
77:13:4d:ac:22:36:82:1d:fe:71:79:eb:71:23:74:
8b:68:08:d0:72:4a:dc:16:48:1b:12:0d:6c:75:15:
c6:34:d4:23:5e:cc:e9:0c:e5:d6:90:a1:74:7f:e3:
f4:26:8d:0a:81:e7:3d:e6:22:ef:de:83:f3:f0:52:
5f:0d:89:e2:44:03:9d:75:2c:79:fb:52:80:93:5f:
1c:77:62:c9:23:2b:a1:15:44:9e:93:b5:b0:ac:b3:
48:be:0d:6b:93:fe:61:dc:42:97:c3:df:f2:c5:47:
6a:59:5d:57:1b:11:b2:21:da:14:82:f1:9c:0f:86:
cd:ab:de:2f:0c:d9:91:43:4c:03:42:4b:55:34:31:
42:b0:67:49:75:2d:ad:c5:a9:20:22:54:e4:c2:c5:
12:7b:46:a9:5b:3d:10:94:d7:e5:fc:3d:33:65:d6:
3c:f1:72:8d:7f:4e:3b:43:b8:79:ac:4b:56:07:64:
16:88:7a:da:c6:ed:67:dc:c8:ce:a8:7a:dd:96:71:
45:e1:de:05:30:4d:06:a2:a8:9e:3b:f4:6b:b8:73:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.39.144.0/20
IPv6:
2a07:b840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44741
Signature Algorithm: sha256WithRSAEncryption
77:a6:78:e3:81:99:30:63:94:c9:da:be:2d:01:5d:20:f1:75:
b6:2d:c9:e3:6b:ef:55:4d:2b:af:c7:37:ce:82:86:73:48:0e:
72:18:d4:7e:56:81:3f:8b:7c:1b:e5:b0:67:de:e1:ec:e8:33:
97:e2:f5:c9:66:a0:7a:1e:0a:3e:5f:f7:67:a4:b2:c2:78:49:
e3:cc:cd:22:3f:1a:ca:d0:3f:48:9c:89:a7:71:7d:b1:72:ee:
5a:a0:6b:8f:4f:51:47:bf:c3:37:86:a3:98:8b:a4:c3:48:c0:
37:bc:94:67:59:e3:a7:93:d7:41:7e:8f:61:ba:e5:c6:58:c6:
f5:31:de:ca:1c:7c:97:ef:43:48:2a:03:46:c9:42:c8:10:50:
8c:8d:f4:9c:63:e5:3f:0f:d3:6a:61:15:82:61:1b:10:e3:03:
89:d8:2b:20:38:86:38:15:08:72:4f:02:c4:5b:10:71:73:85:
77:51:8b:a5:52:46:40:c9:3d:58:f8:f7:3b:e8:5a:22:65:4b:
6d:6c:4d:79:40:0f:60:8c:b3:d0:74:2e:d5:40:2b:bb:bd:c0:
50:11:05:15:a9:a9:b4:f9:7a:72:32:33:8e:d7:5f:50:a6:a4:
19:3c:5b:9c:10:23:a1:9d:2d:0c:b1:b6:0e:ad:71:8a:2b:4f:
a7:17:65:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:46:43 2025 by rpki-client