Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
File: RS59h5IhKd-QxIcNoqdzhARySFg.cer (raw, json)
Hash identifier: 4M+72BYmJov8B+/FlRv+Em1z0ZYCtxvlvPnAaO7L9bk=
Subject key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425215F0D418F480B69CAFD4E7ACDFB40
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200583
IP: 81.173.36.0/22
IP: 185.34.248.0/22
IP: 185.102.40.0/22
IP: 2a06:1f00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:5f:0d:41:8f:48:0b:69:ca:fd:4e:7a:cd:fb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=452e7d87922129df90c4870da2a7738404724858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:42:53:2a:21:f7:a8:f7:81:e9:c1:b6:78:
fb:70:65:05:86:e0:4a:f9:28:0a:9d:8c:c8:89:1a:
43:a3:53:f4:d3:02:3d:f6:a5:f6:68:aa:8e:a2:c4:
b3:11:f5:ae:68:8c:97:55:b9:af:3a:a4:b1:94:11:
74:c2:55:a2:4d:77:55:38:b2:db:a7:fb:68:27:44:
86:00:77:47:97:43:aa:eb:41:33:29:c0:7a:79:90:
8b:93:f0:87:06:e9:3c:c1:f1:6a:14:63:28:fb:6a:
c3:27:6f:5c:34:0d:b0:7f:84:7d:37:c0:5a:b8:6f:
25:3d:24:60:bf:59:71:8c:5e:01:47:21:cf:8b:39:
5b:df:23:95:47:d8:8f:7f:a9:31:8f:3f:05:71:80:
1c:ca:c8:66:91:a1:52:be:95:a1:2b:07:1a:15:37:
bc:53:51:58:44:69:15:69:59:33:7a:d5:fb:6b:2a:
8e:8a:98:69:2b:ae:5f:77:43:18:37:f1:41:26:ed:
33:e8:35:40:8c:fe:7e:f9:4b:fd:c8:18:b1:0f:89:
57:08:7d:0f:c2:99:2f:49:6e:60:b9:b3:97:d5:b0:
da:86:81:bd:a2:8c:c0:ee:bf:fa:4b:ce:11:32:5c:
80:d3:60:5e:d5:26:08:13:d3:16:a5:b4:00:e5:f1:
45:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.173.36.0/22
185.34.248.0/22
185.102.40.0/22
IPv6:
2a06:1f00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200583
Signature Algorithm: sha256WithRSAEncryption
0b:3d:f8:49:54:97:1a:38:f6:54:05:12:93:08:3c:32:fe:ce:
d4:7a:2f:fd:08:16:ca:53:fc:8b:7b:13:9d:50:2a:db:99:61:
4a:48:0e:1d:b5:5e:5f:cf:44:23:6d:92:e2:c1:24:f4:82:5d:
ad:da:de:87:2b:58:bf:20:91:9d:59:63:05:f9:58:b1:03:53:
3a:43:db:46:0e:3b:9d:5d:ff:1f:32:31:1d:65:c9:69:10:f2:
91:0d:34:48:6a:26:a8:92:5a:bb:a1:c9:60:fd:94:37:4b:ba:
2e:10:ca:59:55:d0:5b:03:fa:50:79:c0:73:ae:95:e8:0c:1b:
d4:a0:2a:5c:4b:f1:95:fd:38:12:b6:4b:ea:c7:8b:df:75:5a:
94:3f:0a:16:63:f1:03:ca:47:b2:d9:35:4c:ea:69:cb:36:fe:
5e:af:84:8f:6b:a4:73:5f:19:f0:72:4f:d1:90:18:49:00:66:
c0:c4:a2:a8:4b:65:ce:28:d0:4c:0e:b8:59:e1:7c:b3:53:3f:
f8:39:c1:3d:f8:af:4f:cf:8a:c4:23:6a:26:b2:50:03:3a:24:
ba:12:ad:aa:a1:bd:bd:ed:3d:e4:c2:1c:4e:ec:35:bc:18:eb:
5b:3f:38:c9:b2:39:31:99:88:7e:8f:f8:b5:fb:f6:3c:8c:46:
a4:1b:a7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:06 2025 by rpki-client