Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
File: R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer (raw, json)
Hash identifier: RVRWRk+27d/1kofFTW2KLycuyzLJVrQTEFHbOKm1SeM=
Subject key identifier: 47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942368DC643E34CAFB5FFEED05059E33D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:47:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59464
IP: 194.49.32.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:dc:64:3e:34:ca:fb:5f:fe:ed:05:05:9e:33:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:a0:69:a0:ca:ca:d4:52:bc:2d:58:e2:02:
cd:3e:36:68:d7:52:14:b6:6f:81:66:29:24:47:1c:
ca:b7:e4:bf:26:ed:72:d9:c3:2c:22:0d:8f:02:1b:
e1:b1:b9:02:22:55:5e:d2:7d:58:0c:d4:fa:8a:ca:
0b:dc:2b:aa:3e:1c:db:72:95:74:7a:81:cc:07:2f:
c2:a6:cd:ee:5d:d1:65:c3:0c:48:7e:74:40:89:f2:
6c:48:35:5c:25:3f:b8:e3:68:b7:3c:cb:97:11:c6:
3d:e3:2a:61:a2:fa:c5:c1:24:74:f2:98:9e:10:65:
4b:c2:2e:93:87:7b:d7:6b:40:1c:30:1d:06:7b:04:
9c:fb:d7:dc:e7:3d:db:7c:c2:94:27:4b:58:31:ce:
09:b4:31:84:2f:0a:43:f2:31:9b:41:4e:08:e8:10:
cf:f1:34:09:77:21:a0:68:34:15:ab:e3:4e:32:f5:
38:5d:74:58:15:52:94:17:8c:c2:20:d0:90:57:6f:
ee:fc:69:9a:e1:bb:b7:b2:24:dc:55:9f:1b:9f:a7:
b8:f1:a3:fe:3b:6a:3a:b0:8b:e8:a1:cb:f6:a7:7c:
82:95:01:a0:f4:62:b6:6c:89:24:ea:67:ec:2f:fe:
9e:0b:61:c5:67:24:6b:e8:be:9c:4c:9c:6d:fd:05:
29:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.32.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59464
Signature Algorithm: sha256WithRSAEncryption
1e:e6:3e:c0:50:b2:8e:70:03:8e:02:67:67:22:33:f0:32:7d:
48:62:dc:a8:b5:c8:4c:3e:02:0f:7a:4b:fd:70:5f:02:ec:7e:
cc:17:f9:a4:a5:67:35:ac:cd:a0:28:8b:9d:d3:de:d9:c1:5c:
15:95:f6:b8:04:8b:f4:b9:1e:f3:a1:78:40:7a:25:c3:9e:74:
8e:d3:3b:d2:c7:d6:dd:7b:f6:d7:57:b7:0b:f3:d2:f9:df:3c:
b1:2e:05:4c:14:33:4c:8e:83:c4:69:cc:2f:a2:96:ed:ef:dc:
50:6e:46:16:c1:05:d2:d4:68:69:61:f3:f9:44:b3:a6:bd:8f:
9c:6c:a1:8f:65:c8:61:4e:6a:ba:6c:ce:c9:83:b4:e7:74:11:
d9:c7:3d:f8:24:f7:50:91:b8:e9:79:51:4b:3f:55:51:b9:ba:
55:90:77:cc:2f:be:ef:67:ed:d7:d5:63:97:df:b3:3d:0f:91:
3a:fe:d7:cd:3c:ab:bb:34:9d:19:cd:cf:88:47:3b:48:ee:c2:
ce:5e:fd:f0:79:b4:ec:7c:13:0e:6e:31:c9:fe:ed:33:5b:19:
db:18:ed:6c:f4:c8:d3:ad:b4:d3:f7:13:de:4c:1a:69:a5:0e:
02:68:a0:90:17:9c:3b:8b:17:0b:0b:6b:2f:f6:88:f3:8d:f2:
88:95:60:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:58:11 2025 by rpki-client