Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
File: SJwmPoGEhs_YMcJF3frMqR-9gcA.cer (raw, json)
Hash identifier: f6HQ/TgXS283fE/usKrf/mFqmR+E5kSqQzu2kVUlPY8=
Subject key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DB29A7C6156A3B056295F534232C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202565
AS: 203935
AS: 204166
AS: 206702
IP: 93.115.196.0/22
IP: 137.59.56.0/23
IP: 185.20.108.0/22
IP: 185.107.0.0/22
IP: 185.160.148.0/22
IP: 185.178.160.0/22
IP: 185.194.192.0/22
IP: 185.216.188.0/23
IP: 193.148.84.0/22
IP: 2a0a:1140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:b2:9a:7c:61:56:a3:b0:56:29:5f:53:42:32:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=489c263e818486cfd831c245ddfacca91fbd81c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:45:13:03:82:3c:d9:49:aa:18:7e:57:3e:1d:
ef:8e:67:7c:ad:16:94:96:42:4b:7e:c5:cf:b9:c5:
b1:38:7e:79:76:a3:8b:71:b4:6d:dd:e7:79:46:a8:
98:3f:aa:92:80:d2:a8:f6:39:af:10:6f:41:70:6a:
9c:60:cd:73:07:dc:49:c8:82:6b:40:ad:59:ac:be:
4c:75:1e:68:24:4e:a1:96:1a:68:e9:18:df:07:26:
32:90:43:10:5a:62:09:31:1b:af:41:5b:0e:2a:d5:
15:32:66:36:83:18:f4:99:ef:56:25:78:88:9a:08:
be:8e:4a:b1:26:82:bd:23:9b:a0:3a:fd:9c:83:47:
10:de:f1:47:39:bd:af:c7:bd:13:03:08:3d:fc:25:
35:d1:58:b5:58:3a:70:48:21:21:f5:df:fa:b0:b7:
30:d0:70:52:e5:da:3c:b5:6c:a7:a9:c2:0a:af:32:
12:61:6d:91:86:38:80:32:e2:8d:7c:e3:bf:5e:08:
45:fc:38:96:93:c6:9a:c2:30:25:62:ab:e9:6f:03:
68:8e:cd:47:cd:15:56:ee:0b:76:2d:fd:a3:ca:cf:
80:20:c8:e2:f5:54:04:91:2b:5f:12:f4:75:1b:81:
1f:c5:57:e3:46:99:3d:76:7f:3d:d9:b0:ad:5e:7e:
d0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.196.0/22
137.59.56.0/23
185.20.108.0/22
185.107.0.0/22
185.160.148.0/22
185.178.160.0/22
185.194.192.0/22
185.216.188.0/23
193.148.84.0/22
IPv6:
2a0a:1140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202565
203935
204166
206702
Signature Algorithm: sha256WithRSAEncryption
15:d8:88:ef:f5:29:3c:ae:de:e4:2b:4a:9e:22:38:98:77:c1:
67:9f:d4:4f:40:0d:55:b5:0a:79:f5:37:5f:dc:d2:08:6b:bf:
56:89:b3:e5:bb:a4:5a:6b:27:c7:26:62:70:a5:a1:b4:6b:8b:
a8:ab:06:67:0d:a2:8a:77:49:8f:53:4c:dc:bc:c7:7c:85:61:
03:2f:59:21:3b:d6:e2:07:fc:24:0d:85:2f:d3:4f:a8:24:29:
54:fb:8c:ab:4f:22:b9:54:50:aa:09:16:94:7c:e2:18:fb:c7:
18:38:81:a1:b0:5c:bb:4a:f5:56:ba:0e:10:9e:8e:c8:21:59:
37:8b:56:43:72:b3:2e:0d:0a:a6:0d:e2:ed:71:e4:a6:77:27:
a1:20:11:e0:bc:ad:41:73:05:f4:d6:42:05:63:f9:6c:42:dc:
2b:42:e4:5f:02:72:ed:0f:ec:d7:4e:83:45:1f:33:1d:79:3b:
bd:5a:40:df:b9:3e:4b:ab:c9:da:fd:40:62:3f:57:3b:81:cf:
7e:27:11:77:6e:cf:ea:3e:b4:68:fa:c5:f3:c9:b0:11:d9:c9:
57:b7:fb:40:88:b8:11:aa:a6:e3:48:72:a1:70:34:3a:f8:59:
fa:9b:7e:52:b0:1b:0a:d9:a7:20:ed:5c:e8:d0:88:1b:9a:13:
3d:08:f0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:44:27 2025 by rpki-client