Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer
File: MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer (raw, json)
Hash identifier: sN03yapp2MxX2f+YI1amIYhcZS94t4zMcaxzfxpDSSg=
Subject key identifier: 32:B1:B9:4B:07:3C:54:79:91:C2:0F:84:2E:AD:EC:16:7E:C1:9E:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A1826AFCF777BCC0DC4EE27A5E846
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56861
IP: 176.56.144.0 -- 176.56.155.255
IP: 185.63.236.0/22
IP: 2a03:d20::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:18:26:af:cf:77:7b:cc:0d:c4:ee:27:a5:e8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32b1b94b073c547991c20f842eadec167ec19e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:9f:e1:8f:39:e8:75:41:aa:ec:f8:56:3f:
b6:b0:64:76:f2:a3:ff:14:df:16:c0:7e:04:50:7a:
b4:7b:9a:a5:21:8c:55:7c:43:22:08:f6:db:24:2a:
be:3a:cc:d5:4a:d6:d7:2a:ec:68:ce:5c:1d:20:31:
d3:d9:35:88:ac:86:7c:bd:6b:3a:60:3e:6a:d4:d2:
00:20:f8:ac:ba:25:e7:c8:18:0a:37:ab:9d:81:15:
ab:86:68:20:07:d3:8f:b1:44:6a:02:4a:7e:27:dd:
66:3e:3b:e7:7b:dc:33:7f:34:07:15:41:e4:63:76:
a6:db:98:26:88:de:fd:75:82:01:b7:86:53:fc:30:
31:0f:19:36:64:35:62:ff:56:01:f3:78:db:42:41:
bb:91:54:ef:a3:80:8c:42:1a:b2:24:d7:11:c3:b6:
f0:68:9f:41:fd:d3:21:86:e9:c4:2b:34:41:f5:9a:
eb:ba:e0:96:0e:a2:1b:bf:1f:cf:3f:1c:bf:45:c2:
2b:44:5c:ba:54:a4:be:9f:52:e2:40:2a:c9:9c:8b:
75:17:b3:32:1c:bd:14:29:65:41:56:1b:99:1b:af:
bd:e6:5b:4d:34:1e:21:2f:10:5a:65:a0:1c:7e:76:
10:3e:4a:44:c6:2b:7b:7a:89:97:ed:8e:7e:af:61:
55:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B1:B9:4B:07:3C:54:79:91:C2:0F:84:2E:AD:EC:16:7E:C1:9E:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.144.0-176.56.155.255
185.63.236.0/22
IPv6:
2a03:d20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56861
Signature Algorithm: sha256WithRSAEncryption
4c:fe:0d:55:fd:92:cd:ef:81:76:25:90:ae:a8:25:59:31:ac:
0b:30:58:5b:e0:1d:1a:5a:b6:d6:94:1f:6e:e2:eb:15:9d:70:
5d:20:a5:ed:ca:ef:ff:5b:74:b6:75:21:c8:db:8c:48:ba:07:
b6:5c:0b:41:d0:ef:14:08:f5:b2:b3:3b:32:bd:22:28:37:bd:
aa:55:71:7a:59:dd:06:b5:5e:59:a1:e5:4a:0b:97:53:ae:f1:
70:5c:63:07:29:be:b1:44:37:33:8c:07:5a:14:42:7d:f2:43:
08:1d:d9:26:af:6f:75:94:2d:69:c4:46:0c:7a:5d:bb:0b:9b:
e3:53:68:57:65:b4:d5:14:90:a4:67:8f:c5:23:fc:d0:56:76:
55:8c:f0:f0:eb:f4:c4:36:c5:37:65:83:9f:fd:4e:79:e2:e8:
bc:ef:60:3d:52:5a:e7:e0:0e:8d:77:57:5d:14:11:79:2b:20:
0c:de:1a:26:e7:00:7d:2b:95:7e:88:32:da:db:38:a8:e6:3a:
0a:ee:c5:85:33:bc:fe:a6:a6:8c:5d:00:b6:07:b2:f0:af:92:
a4:bd:4c:cb:4f:4b:64:46:64:c7:4e:d9:3f:2c:ed:5b:e4:88:
8b:53:d0:70:f6:3d:00:2d:c6:37:f7:fd:97:83:16:5c:f2:50:
cd:6b:7d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:26 2025 by rpki-client