Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
File: SVls7MId0CZ3pyfvN_BolUbqUJc.cer (raw, json)
Hash identifier: FhLCcFJW5hqCzyZElYW92a2gLl3EznmsTRVjaYgxn60=
Subject key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214442C113B4F3935AB63627EC676338
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 5390
IP: 83.118.224.0/22
IP: 83.119.0.0/18
IP: 85.148.0.0/15
IP: 195.96.96.0/19
IP: 2001:960::/32
IP: 2a01:7340::/29
IP: 2a02:2500::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:42:c1:13:b4:f3:93:5a:b6:36:27:ec:67:63:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49596cecc21dd02677a727ef37f0689546ea5097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:00:22:45:a4:2a:96:5f:77:75:90:4a:46:
79:72:ad:0b:14:b4:41:07:ca:96:3a:04:55:1c:76:
fc:0d:52:59:ae:6c:cb:f1:b4:c3:3c:27:dd:9e:49:
c4:30:a4:63:5e:05:8a:b9:c1:c1:27:58:d5:ca:da:
a7:49:f1:76:ef:2a:f5:95:63:64:96:c5:38:1d:b7:
bf:8d:18:d0:da:5a:ea:bc:ed:ee:cf:8f:3e:94:83:
8f:17:67:cb:e1:ca:13:3b:2c:ab:e0:c5:ad:86:eb:
f6:ef:a1:f1:8c:6a:ad:8f:57:96:a9:30:00:53:6e:
45:21:52:02:2f:1d:cf:89:8d:43:cf:21:8b:cd:01:
5d:10:ff:9c:fc:3b:57:75:69:b3:82:fd:63:df:7d:
35:9e:f4:77:38:a1:d0:cc:bc:8f:4d:26:24:72:14:
78:06:6b:b4:88:0f:25:6d:b6:73:45:b6:86:65:cf:
bc:d1:c4:38:a1:37:63:97:67:0e:b5:39:20:2e:4c:
f5:31:98:0d:ec:d3:4b:64:42:5b:7e:56:42:e4:80:
76:d3:2f:15:5a:5d:73:0d:1a:da:e7:a0:79:dd:11:
a5:12:55:4c:80:a6:49:31:67:70:0c:e1:25:4d:71:
2d:6f:9d:90:dd:da:74:dc:0f:cd:93:4d:f5:0f:75:
e8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.224.0/22
83.119.0.0/18
85.148.0.0/15
195.96.96.0/19
IPv6:
2001:960::/32
2a01:7340::/29
2a02:2500::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5390
Signature Algorithm: sha256WithRSAEncryption
5e:65:60:48:29:c9:1f:81:06:9c:23:7b:d9:9f:dd:f6:e3:c9:
d2:9a:6c:4b:e7:db:85:9e:21:b7:bb:4c:4c:a7:d3:39:c5:a4:
f8:38:1e:ec:57:99:c8:bf:09:de:f4:1a:d3:df:a6:05:1e:18:
92:cd:f3:d6:42:a4:8f:4d:bc:12:0e:81:d8:88:0e:d6:3b:03:
0b:9a:f3:68:61:27:9d:f4:26:12:67:73:2d:23:59:74:20:8f:
56:d1:93:10:9f:ae:b4:7d:7e:fe:6b:5a:82:62:c8:56:80:03:
84:80:cc:d8:24:1d:00:84:71:06:99:e8:e2:f3:6b:c2:b1:16:
78:c8:65:0b:44:e9:b6:e0:20:70:35:50:5a:1d:7b:a4:de:22:
72:64:23:8f:8a:52:64:14:a2:68:3a:9e:80:99:0f:ac:33:e7:
ee:dd:aa:3b:f1:13:9f:0c:e5:04:78:53:59:c9:11:04:15:5b:
59:df:ec:89:a3:53:46:5a:5a:1f:68:59:9e:b9:70:08:2e:95:
09:d2:02:65:d0:bd:c3:a3:25:fd:19:b3:3d:51:d1:e7:22:c3:
e8:30:f0:91:34:56:97:05:02:7c:05:74:d8:18:61:63:0b:7b:
ab:dd:6d:93:aa:7f:d0:b3:9f:3a:95:c2:17:a6:3f:5b:1e:3e:
c9:77:02:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:31:38 2025 by rpki-client