Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
File: NoEciv-vsKwfX39v97ZLtwNGRX0.cer (raw, json)
Hash identifier: iqInrAkXwTJ7m99oAgfFcOtwRxVvFicwUI/Al8YlFKE=
Subject key identifier: 36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFAAB16C282E57A1B02D036E4E32920
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205446
IP: 91.216.210.0/24
IP: 2a12:d440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ab:16:c2:82:e5:7a:1b:02:d0:36:e4:e3:29:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:62:89:2b:12:e0:2c:e1:cc:c4:1b:68:b9:
c2:c4:2c:83:90:d4:8c:5c:e2:bc:70:46:c7:03:dc:
45:86:f5:25:a3:93:8a:04:46:57:16:f3:28:f8:f9:
f0:c7:59:64:d1:f2:4e:d9:45:61:05:7e:4c:ec:d2:
52:db:b3:cd:78:9a:04:37:88:02:d5:6f:b9:de:fa:
8d:e9:ed:9e:af:53:f3:b9:64:12:c3:04:8b:34:ba:
3f:4d:ca:60:30:ad:34:f2:83:13:f4:cd:e8:68:67:
97:b2:90:1b:20:19:7f:66:d7:94:b0:28:cc:2a:0a:
68:ff:75:89:73:a3:58:dc:8b:ef:04:f3:e6:fc:f7:
7f:a4:21:8d:cc:07:5a:e7:6b:69:d6:56:40:60:94:
01:4a:bb:2b:26:4f:7c:19:1e:5c:ac:0a:a2:23:a2:
2c:77:32:91:d7:a8:d2:ea:fd:1e:d5:b4:fb:1d:38:
66:fd:2a:47:f9:24:e5:e8:70:29:40:32:20:09:cf:
39:75:74:47:a5:f6:04:a5:9c:f1:b9:ca:7d:67:40:
ad:cd:f7:31:11:29:2e:c5:7e:a6:36:db:20:89:f9:
e5:0d:34:51:15:7f:3f:3a:4e:09:b6:59:6a:c4:92:
73:c6:74:ce:95:f2:2a:d8:48:81:be:3e:de:cc:a7:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.210.0/24
IPv6:
2a12:d440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205446
Signature Algorithm: sha256WithRSAEncryption
9a:39:88:2d:21:33:05:56:f5:10:25:c2:32:eb:a7:8a:58:a4:
1e:34:75:5d:af:37:90:31:48:7a:28:ae:a2:c3:7a:7d:b8:1a:
21:23:7c:e9:a5:fe:10:26:fe:bc:ea:09:58:e0:af:e5:e2:f2:
8a:f2:e5:d4:59:6a:f3:bc:8f:53:0e:9b:65:06:82:13:52:4a:
c2:ea:e9:a4:3c:52:24:b6:4f:af:e9:2a:3b:43:9c:ea:8b:d2:
5f:c3:8e:ff:82:de:7d:5c:5d:e3:3d:92:01:d4:4b:6c:f2:8a:
29:b2:eb:43:81:0b:85:28:82:c3:54:bd:d1:f7:50:5e:2f:7c:
af:33:c1:18:04:f4:a8:cd:8b:85:15:dd:25:07:24:34:af:b1:
8b:cd:2d:f6:92:d5:5d:53:65:14:5a:cd:f8:98:e2:2c:80:52:
a5:86:59:6e:41:76:43:f0:49:98:6c:d6:2d:83:cd:50:3e:ca:
f7:f5:8c:43:63:84:9f:6a:f3:c9:85:88:22:61:e9:85:f6:82:
18:0c:f2:49:e0:cf:16:40:40:b8:c8:bf:46:97:4f:6a:65:26:
78:4e:81:30:12:48:12:4c:bf:14:1f:42:90:13:a4:05:86:d4:
50:4f:0b:c3:3c:e2:17:fa:18:aa:1d:6b:88:fc:9b:ca:34:e8:
e6:ab:72:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:11:01 2025 by rpki-client