Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
File: N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer (raw, json)
Hash identifier: aoF9mkNAY4Q+66ESTAkwgXNiA0e9vFqnoxwjFgJE0ao=
Subject key identifier: 37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D951C8E1FB70E1E3D1E583E750C5D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50826
IP: 185.133.156.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:51:c8:e1:fb:70:e1:e3:d1:e5:83:e7:50:c5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:d3:c2:dc:17:1f:aa:e4:ee:6b:8f:5d:b2:
a4:16:62:8d:e3:b6:c1:1c:e6:82:bb:ac:94:0a:e8:
23:90:7c:b4:51:c3:b7:c8:d7:2d:b8:57:28:10:e4:
3b:30:81:37:2f:b6:14:dc:00:13:d9:35:91:fe:09:
cb:26:0d:02:25:94:6b:e1:94:6a:86:11:29:2a:94:
4c:ce:58:7f:67:48:79:a5:94:4a:a5:cb:b4:70:19:
ac:ce:55:dd:6c:42:97:96:6d:7a:32:7c:1e:55:ec:
e3:e8:19:e5:f1:42:ac:32:d4:4d:9f:bb:18:2f:e6:
bd:db:89:6b:3a:a0:48:a3:01:11:9e:b4:12:33:90:
e6:d4:5c:ae:d2:82:b7:29:22:1c:ee:34:5b:e0:a8:
ec:51:70:9e:2f:b5:ba:a4:f0:17:b5:bf:c0:4a:06:
09:a1:f1:24:16:06:ce:87:9b:1c:73:8c:57:ed:78:
38:d3:db:c4:95:73:91:e2:c5:e2:d4:5e:23:5d:2b:
87:9e:8e:f9:af:56:fa:c2:ee:4d:96:d7:f7:ac:8f:
94:e0:da:06:ff:21:50:53:eb:80:56:b2:1e:cd:26:
b5:24:3e:0d:50:a9:a1:2c:a8:74:2c:58:64:85:d9:
fb:d0:df:72:f7:19:6d:10:2d:2d:61:e3:1c:f6:1d:
6d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.156.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50826
Signature Algorithm: sha256WithRSAEncryption
21:72:0e:13:94:2c:08:e0:7d:9a:7e:d9:ee:13:a1:ff:12:12:
8e:1e:2e:13:d4:f0:5b:15:71:5e:bb:c3:c8:81:82:bc:b0:9a:
1d:68:45:bb:ac:7a:d4:1a:26:f9:3e:55:c2:41:82:f6:e8:25:
eb:46:ae:42:96:b0:80:e0:dd:13:a1:d1:df:00:09:22:91:ab:
69:19:5a:f6:f6:fb:1e:4d:7d:db:8f:17:97:0a:2b:44:0a:1e:
8d:70:ed:b4:cf:05:b9:60:02:a8:eb:8a:97:25:0a:95:df:d4:
e6:a9:6f:db:36:e3:97:3e:3e:c6:34:6d:33:4a:90:6a:23:c0:
87:7e:25:58:a9:fa:3b:c0:4c:e0:14:a2:7b:63:64:78:80:9d:
ae:e7:e6:e8:5e:6f:46:cf:95:59:2a:33:96:51:33:ff:d4:4c:
7b:b4:d6:2c:1b:32:96:dd:e2:c3:05:a8:3e:28:6f:6d:66:cf:
23:66:fc:6c:79:8c:58:c4:56:52:f1:fd:77:b4:1e:ad:cf:9c:
33:6a:53:37:4a:f1:5a:16:74:c3:fb:d0:65:c6:ad:cd:0a:db:
9b:0f:6b:17:ea:2c:c2:8f:fc:dd:7f:79:7d:db:eb:0a:bd:af:
d2:b8:57:cf:17:a5:16:cc:49:37:85:b2:6b:d3:f6:dd:2f:56:
29:e3:2f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:40:56 2025 by rpki-client