Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mh6FAflfcDdNRXa5sM1VW68fNas.cer
File: Mh6FAflfcDdNRXa5sM1VW68fNas.cer (raw, json)
Hash identifier: dW8wbcRExVmuMOJ9ATBxsQIlyY9V2nsYGN50fVhs8eM=
Subject key identifier: 32:1E:85:01:F9:5F:70:37:4D:45:76:B9:B0:CD:55:5B:AF:1F:35:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B60520D532DDD1D0B2EAD0BA1788C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/16bf28-842b-48fa-894d-fbf7575aace2/1/Mh6FAflfcDdNRXa5sM1VW68fNas.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/16bf28-842b-48fa-894d-fbf7575aace2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42175
IP: 193.160.29.0/24
IP: 2001:67c:228::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:05:20:d5:32:dd:d1:d0:b2:ea:d0:ba:17:88:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=321e8501f95f70374d4576b9b0cd555baf1f35ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:61:86:14:f6:e1:f1:2d:b3:67:51:ac:a5:70:
01:b9:b1:96:d4:b0:74:6b:13:78:aa:f6:f1:c5:69:
a7:81:34:c7:ed:0e:d6:5c:f8:f2:36:e7:27:29:bd:
a9:e4:f9:bb:c5:8a:85:00:1a:65:6e:6f:89:fa:c4:
60:2f:5d:f2:c0:52:4f:11:93:7b:ba:b8:a7:7e:88:
47:e0:ef:6d:e3:f7:1c:df:8f:cb:d2:ab:c8:ac:51:
0d:7f:14:4d:12:ea:99:da:8f:8c:52:ec:b5:f4:d4:
1c:ce:25:f5:7e:a1:22:fa:fb:bb:06:90:8e:bd:8a:
e7:9d:35:3c:2d:e4:f2:ef:9f:ab:fa:57:50:cb:28:
3b:30:eb:e9:42:2a:5a:e8:dc:fe:51:b6:81:ce:e7:
71:f1:ad:fb:ec:82:49:c2:8b:13:fc:12:7c:ad:73:
51:3b:cd:30:cf:5a:c1:65:f8:d4:38:f1:73:e7:5c:
e6:b2:a4:fc:15:4b:8e:77:06:9d:23:52:1d:d5:09:
28:73:bc:d8:f4:af:ab:da:c2:51:ac:75:11:33:b0:
17:06:01:aa:32:3e:db:e8:83:f8:9c:01:f9:24:b6:
d0:da:cb:5b:9d:8c:9d:56:55:a7:98:70:52:ec:e3:
b4:1e:d3:01:df:64:58:3a:c5:fc:57:ba:5a:63:05:
c0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1E:85:01:F9:5F:70:37:4D:45:76:B9:B0:CD:55:5B:AF:1F:35:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/16bf28-842b-48fa-894d-fbf7575aace2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/16bf28-842b-48fa-894d-fbf7575aace2/1/Mh6FAflfcDdNRXa5sM1VW68fNas.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.29.0/24
IPv6:
2001:67c:228::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42175
Signature Algorithm: sha256WithRSAEncryption
65:8c:25:0c:9a:48:30:10:96:5c:f4:b9:fa:9b:1c:6e:3b:9c:
55:19:fc:10:a3:11:a9:c2:13:1a:b6:07:38:05:c9:6e:01:bd:
10:b5:f4:dc:b7:38:ca:ad:7a:1f:28:48:bd:c4:2f:e9:03:d3:
4e:8f:e3:03:35:67:19:2f:a0:6a:4e:5a:c4:1f:96:d8:14:aa:
6f:76:61:47:db:fa:e6:73:a1:16:28:de:d8:10:94:ad:7b:99:
b1:5b:54:48:98:d9:43:64:08:1c:d6:a7:aa:a9:7a:f1:05:f8:
9d:5e:50:a4:04:85:fd:ff:f0:96:ec:06:0a:bd:04:f3:53:55:
76:6f:26:0f:07:ce:85:03:a0:75:4d:66:63:f9:95:f8:b8:1c:
d8:30:07:8f:ec:2c:78:b6:33:e9:ca:49:b1:73:99:83:cd:35:
54:57:7d:fa:69:6e:b8:b8:ac:ee:f4:75:d3:6a:04:cd:a1:97:
ba:24:12:2f:99:c8:a4:ee:02:eb:a7:f1:83:60:dc:74:2e:d7:
db:94:b4:9e:69:9b:86:2d:29:2f:f6:eb:2b:9b:76:47:44:76:
16:33:35:1a:fa:d1:4c:04:71:95:b9:d4:3f:c3:17:3b:1f:a2:
0f:37:c2:b1:6d:9b:c5:97:12:e1:99:04:de:3c:05:b8:20:78:
bc:ff:57:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:55 2025 by rpki-client