Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
File: MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer (raw, json)
Hash identifier: UNOROMEWtIorMDPbw//AfAZkc+NWIhzQKBujWvyaY1E=
Subject key identifier: 31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D22D90C42FD748AEED42D12461CDA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39926
IP: 195.95.142.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:22:d9:0c:42:fd:74:8a:ee:d4:2d:12:46:1c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:9a:10:ae:48:55:db:29:91:4b:87:52:79:
ad:a6:91:bc:81:92:bb:ad:73:cc:c9:b6:57:20:5e:
73:b5:76:60:3c:76:7d:b7:f9:98:f5:9c:b1:04:ea:
b5:35:86:e1:84:50:d1:a3:2e:db:57:b9:e9:62:2b:
1a:90:f9:1f:93:fd:f3:ba:a2:14:92:f9:4e:cd:0c:
3c:7c:68:97:fb:fa:51:eb:11:1a:41:f7:29:65:fb:
cb:fa:27:71:c4:03:ce:c1:ac:bf:ed:58:ed:3d:95:
23:f7:62:b6:2c:45:c6:89:c3:12:1a:97:a8:a4:aa:
42:6b:74:58:b7:cd:77:27:4b:a3:6e:a9:93:ce:bd:
89:76:1e:6c:9d:c2:10:31:1d:da:81:8d:4a:e2:31:
6f:c4:89:4d:0f:52:41:45:8e:1e:30:d1:99:93:81:
b7:91:e6:65:4d:bf:18:0a:db:a6:91:47:64:0d:c9:
13:f0:f1:c8:28:10:51:47:2c:80:62:ec:99:a4:aa:
10:f1:43:3a:46:3c:7e:0e:c8:7d:94:d1:3b:43:c8:
54:10:1c:e0:1d:74:8e:7b:c4:99:35:e4:06:bd:17:
ab:34:b5:1d:9a:7d:37:37:5e:cc:b4:6c:59:24:75:
8e:0e:89:16:54:6a:7c:7c:03:e6:fa:30:18:05:d6:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.142.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39926
Signature Algorithm: sha256WithRSAEncryption
73:e1:17:b2:6f:4e:1c:ba:48:88:71:0f:b6:c5:94:98:08:59:
8d:45:3e:c4:9e:33:6b:38:e9:9d:f5:69:71:cc:b3:15:d0:b1:
6b:32:0e:fa:fa:4f:8b:7e:27:11:7a:90:4b:c3:51:d6:52:85:
27:e6:2f:d8:d9:10:9e:ac:d5:32:24:80:a3:55:fe:ef:3c:4b:
af:5d:1a:30:32:23:11:51:6f:75:6c:b0:cd:bf:b9:4c:44:da:
4a:f7:c9:ad:4f:7b:dc:28:30:bf:70:f8:0d:4e:5c:90:6b:a0:
cd:40:e8:a0:e1:c9:21:7f:31:db:88:8f:ca:7b:66:00:d2:c4:
43:a7:5b:ad:be:bf:f0:05:a9:f4:6b:a7:fc:28:03:87:1e:32:
f9:d4:9e:13:d2:a1:1b:26:6d:54:c0:d6:28:20:eb:3a:bd:cd:
ed:4d:a4:e1:f9:92:77:54:93:97:f5:d3:d7:64:9e:ff:14:99:
09:1f:87:87:55:73:b3:34:4c:24:3e:b4:eb:f6:40:09:5b:c6:
09:ae:e1:3d:03:9d:11:aa:c3:2e:87:ab:a6:f5:ae:05:d7:a3:
06:ca:6f:51:95:f7:08:62:76:0d:d2:fd:2a:54:24:d2:c1:d5:
53:88:e9:83:5d:fd:a9:4c:84:f6:39:a3:7e:cf:64:5f:96:2a:
f1:af:d8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:01:55 2025 by rpki-client