Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
File: SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer (raw, json)
Hash identifier: 2SZ63o/RzIorq8BdktaEPEBdDIhTqFVSiBLlUkzKudU=
Subject key identifier: 48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6D6AB4CB30B57398C501CC84A7899
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210847
IP: 193.37.84.0/22
IP: 2a0c:1b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d6:ab:4c:b3:0b:57:39:8c:50:1c:c8:4a:78:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4834387ebfecda637a76e11199e1cd0307c2f4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:7c:78:21:20:c2:c5:db:bd:0b:75:72:cb:
4a:76:2b:ee:0e:47:23:db:16:a6:b8:f4:d0:69:15:
65:c0:11:23:b0:4e:f5:73:6d:8a:7c:4a:9a:a8:13:
b8:b6:a8:29:2e:67:a0:76:d7:f6:93:1d:11:15:e5:
8a:bd:93:5d:b6:da:88:8a:bc:bd:66:40:db:62:ea:
1f:40:8f:ef:60:a4:ea:92:da:0d:a3:fc:ec:fc:ca:
94:59:30:d9:74:2e:26:6e:1c:59:e0:4f:bd:c9:c5:
aa:50:5f:22:c7:fe:9b:ce:06:d3:f6:33:0c:ee:32:
93:c5:5d:2e:a4:34:dd:f4:06:b8:68:93:42:1c:61:
ae:37:b3:43:f7:77:0e:8d:b1:84:c0:d0:73:d1:dd:
21:fa:8b:ec:bc:40:81:85:7a:27:36:c0:bd:55:0b:
5e:3d:d8:10:fc:1c:b6:30:d1:1c:02:f7:3e:45:b8:
ad:b4:87:24:10:a1:c0:7d:76:51:cf:5e:3d:84:30:
00:9b:0d:ae:05:40:8f:8d:b0:eb:8e:28:79:5a:0d:
ba:3e:65:2f:44:9e:8a:87:23:be:61:66:d7:ce:9f:
62:85:d9:eb:a7:29:be:26:29:15:4c:ac:6e:a4:f4:
96:9f:b0:7c:5a:e0:5a:5a:e3:ab:42:06:db:4f:cf:
ba:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.84.0/22
IPv6:
2a0c:1b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210847
Signature Algorithm: sha256WithRSAEncryption
8b:60:e3:8d:ed:38:ba:10:52:30:93:eb:6f:f4:db:bc:1c:6a:
54:49:26:e8:86:5c:c1:c5:ca:4c:77:5b:19:d1:8f:c6:01:36:
54:ce:08:bc:bd:be:01:dc:e7:5c:ca:79:3b:fd:a5:a8:0e:03:
dc:73:2b:46:3d:e2:dc:c7:db:16:f8:04:83:ec:61:1a:e2:c9:
54:d2:38:a9:9c:52:79:87:b3:97:4a:be:c8:cc:8f:45:3c:02:
05:12:38:b4:06:a6:c3:8f:e9:e5:4f:cd:3d:45:9b:88:5c:56:
46:28:6e:6f:25:21:6a:59:c0:65:cd:21:75:f8:f0:9f:91:ea:
72:46:94:16:2b:57:05:7a:7a:2f:a1:90:f1:37:69:c8:dd:e6:
bc:e6:91:cc:ec:b3:48:76:3d:37:46:04:59:60:46:c0:02:dd:
b8:b3:8d:4b:40:c0:80:77:09:99:cb:55:35:d4:91:7d:a9:0d:
90:eb:80:17:6f:b4:14:d1:18:53:6e:5a:91:41:c8:f4:fb:c1:
9d:a2:02:b6:47:27:28:0d:05:b6:2f:79:d8:5e:f9:70:b4:dc:
b4:44:9e:4d:03:a0:38:ff:f4:19:51:57:14:e3:46:53:6d:03:
72:67:33:48:7a:ca:b9:30:5e:06:4f:3e:24:cc:24:58:6c:d6:
f8:46:0e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:43:50 2025 by rpki-client