Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
File: QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer (raw, json)
Hash identifier: uPDH1bsCJdLkBXqex+ziOdcGlnHnYjayImgu7/eOHDs=
Subject key identifier: 41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422200DA3B0A30E80995828DEC3AD2CA3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29668
AS: 60012
IP: 81.19.48.0/20
IP: 81.91.240.0/20
IP: 176.221.56.0/21
IP: 185.62.76.0/22
IP: 185.204.44.0/22
IP: 2a01:90::/32
IP: 2a04:ef80::/29
IP: 2a0a:f3c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0d:a3:b0:a3:0e:80:99:58:28:de:c3:ad:2c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:52:46:cd:aa:0d:42:70:6d:a8:d4:a2:b9:aa:
d6:f7:d2:61:5e:ee:3a:90:2b:e0:a9:9f:3a:59:f3:
39:b0:7c:fc:16:87:27:b0:8d:32:1b:f3:ce:fb:05:
63:5f:9f:e6:0b:ec:42:b0:a1:69:12:63:7e:5b:76:
49:9f:6c:ec:8f:6d:ae:30:c1:61:af:8d:e0:bc:e4:
56:3b:bf:8b:69:a6:7f:78:b2:c3:a8:f9:fd:d6:08:
12:ec:6f:ed:3e:1c:7b:d5:a5:ce:e0:32:c0:70:e4:
fe:48:7f:a2:81:af:93:35:a7:a3:ad:a8:15:c1:7f:
1c:5d:ec:04:4d:fd:df:ba:94:04:07:06:20:92:ab:
21:08:07:2b:b1:eb:05:f0:57:19:5d:d9:33:6b:cd:
54:8f:95:b1:85:a7:08:87:26:4a:9b:61:58:e1:af:
b1:b2:14:37:90:e2:9b:c7:6c:2d:3d:a9:5f:7a:40:
0d:3e:9b:1f:9b:4c:54:cc:97:cd:2c:2f:1e:bb:4e:
f3:b2:0e:42:97:5c:ab:bd:01:c5:fe:31:56:98:a8:
86:6e:78:cc:82:d3:4d:26:04:40:a7:1c:ec:b9:e9:
ad:c6:cf:86:70:fb:5b:e3:0b:52:00:bf:01:ea:f0:
25:a2:91:fa:38:2d:c5:63:2a:a3:f7:b5:35:72:6d:
13:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.48.0/20
81.91.240.0/20
176.221.56.0/21
185.62.76.0/22
185.204.44.0/22
IPv6:
2a01:90::/32
2a04:ef80::/29
2a0a:f3c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29668
60012
Signature Algorithm: sha256WithRSAEncryption
1d:e7:05:fb:64:65:c9:0f:a1:00:81:75:b4:09:14:a7:93:55:
fc:9c:2e:d8:64:bd:fe:c5:9c:d3:d9:10:e8:47:a1:ca:25:58:
36:cb:7a:58:b3:19:59:a5:3d:09:f4:50:fe:5d:5e:03:91:4d:
f3:23:c8:e7:42:0f:47:c8:74:a6:4c:ae:d2:3d:95:23:ec:96:
b0:0d:dc:d1:da:16:24:ac:3e:5c:18:fc:85:e5:49:3e:7a:63:
d5:9a:4b:1b:0d:8f:e1:c6:a4:6f:db:94:72:2d:22:53:e6:3a:
00:54:73:bd:ce:d3:f3:24:99:1a:5a:45:9d:4b:8f:61:4e:49:
e9:91:11:a7:a5:8e:2e:7e:ea:3f:09:fc:83:10:ff:f2:9d:ae:
55:08:b7:e6:08:6c:4e:dc:05:eb:10:71:c1:33:92:ea:d1:ad:
ab:13:c1:09:c1:b5:ca:f6:7a:10:da:2b:e3:3d:60:41:45:1f:
9f:fc:8d:b4:df:65:6d:6e:c5:4f:88:16:3e:e7:d1:e6:c9:69:
b2:4f:dc:cd:b4:0e:f0:2d:6b:4d:1e:dd:4a:95:36:c4:b3:5b:
0e:ab:35:78:66:7a:f2:d1:8c:25:d0:8d:7d:e3:e6:dd:32:c9:
f9:f3:50:6b:93:51:f4:4f:0b:0e:dd:a1:ac:f7:4e:5c:2d:83:
9d:8b:5c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 11:00:56 2025 by rpki-client