Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
File: MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer (raw, json)
Hash identifier: cdXORGsnELgM8OLSM4q8LZaT3gXqzDvq81r97/RmkFI=
Subject key identifier: 31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D992B9CEDCC85490B1A3866BF3847A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197368
IP: 91.220.44.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:92:b9:ce:dc:c8:54:90:b1:a3:86:6b:f3:84:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=310e2e9fb70668c796adce877b21e09a8a1ad029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:e2:83:32:8f:76:49:0a:a2:68:db:43:d6:
3c:a5:59:5a:60:88:10:9f:79:f3:df:88:06:7a:a6:
2a:01:51:3a:31:16:11:a2:ee:51:20:e7:35:b9:23:
04:f0:7b:96:0c:c1:d7:d5:b3:c9:86:00:f5:59:c9:
39:33:ad:84:d0:02:41:09:c2:32:5c:fd:e9:08:29:
cc:d0:52:27:f7:5d:6d:d7:6f:0b:e5:75:13:d0:70:
e3:e3:dd:ef:ee:3d:b7:1f:4e:13:c0:1a:20:ef:86:
19:6b:a6:8e:8e:55:79:64:b8:df:e2:f5:ff:d5:f1:
90:ce:46:7d:30:3d:a8:3e:28:ae:40:16:00:b0:b4:
76:3a:f1:e2:ea:91:b0:39:3f:10:33:72:ff:89:1e:
89:09:66:60:5e:8d:df:e1:31:b0:2c:36:67:4e:bf:
95:b1:bd:e0:ad:10:69:af:a6:c3:c5:ba:f9:df:aa:
07:ee:00:0a:f1:39:0a:18:dd:a2:e9:09:73:90:d7:
52:85:62:90:d4:68:6c:73:e9:24:79:82:e9:77:c5:
30:2b:35:44:ad:b6:14:c4:09:b7:71:53:4a:62:89:
d8:e7:33:07:80:f2:80:76:b6:04:39:84:2e:9d:f9:
ca:45:bb:33:9d:a2:ab:8a:61:21:3b:e7:44:14:6e:
00:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.44.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197368
Signature Algorithm: sha256WithRSAEncryption
73:60:f2:4f:33:d3:d6:c7:de:b6:ba:66:3d:a1:2e:55:71:47:
75:28:94:64:14:ea:73:d0:97:af:3d:aa:65:9f:20:d9:eb:dd:
90:ef:13:ac:38:c2:c0:e9:55:9f:94:11:07:43:e4:3d:0a:62:
d6:f0:da:4d:e8:70:9d:d7:cb:6d:c1:d7:eb:56:78:c7:11:27:
fe:43:50:b1:90:95:d6:36:10:bc:c5:d5:c0:a1:0f:82:ac:66:
cf:9e:27:a1:03:9f:0b:8e:d6:fb:5f:84:80:73:2e:f1:e9:77:
98:90:33:12:59:37:d3:d2:93:c0:0e:33:1c:bd:89:35:08:da:
b7:d3:2e:65:9f:52:a9:1c:8a:c1:63:62:d7:c0:7b:44:e8:d1:
9b:6f:bd:a7:95:8d:b2:a0:93:81:97:39:d2:f1:1d:13:07:a3:
26:98:5e:3e:81:b3:97:94:7c:d1:3a:df:6c:7a:64:66:16:04:
20:73:c5:b6:05:09:d0:25:5c:c1:d1:53:4a:65:c0:7c:56:a1:
23:3f:d5:b7:cf:3d:55:7b:d7:8d:ae:a4:95:be:10:16:c9:fe:
e7:ba:53:7a:f3:70:d1:40:1b:80:ca:68:f3:20:5c:ae:33:fd:
a3:c5:ee:5d:f2:91:62:e0:bd:1e:76:0b:1d:cb:d2:a9:86:da:
c7:11:4f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:55 2025 by rpki-client