Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
File: Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer (raw, json)
Hash identifier: Mz7dusMiT/lTAoFcammIOONhCfuX5TU52QSo+PwrAXU=
Subject key identifier: 49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB77B6550BEBD5BF6DCF1A02B8FC8D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47723
IP: 92.246.148.0/22
IP: 93.90.220.0/22
IP: 185.58.220.0/22
IP: 185.236.208.0/22
IP: 2a02:6620::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:77:b6:55:0b:eb:d5:bf:6d:cf:1a:02:b8:fc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:dc:17:33:16:f1:1b:02:46:0d:ea:3c:04:
f7:32:8e:97:9d:d1:a5:3e:6d:3f:40:b5:ab:29:3d:
3b:5c:f0:92:81:20:65:42:fc:b5:b3:62:af:51:12:
84:5f:2f:b2:12:09:b7:1e:18:c2:15:d1:f2:ba:5a:
fd:c9:92:78:25:f7:0b:76:f1:59:1a:d7:ae:77:ad:
60:0b:7e:ca:82:f3:7f:7c:a3:8e:64:37:c7:40:63:
0d:30:e9:37:c5:0e:67:ba:f0:54:55:b5:4b:89:ce:
98:e9:f1:38:8b:a7:b6:db:b8:da:18:34:8e:d1:0f:
0a:66:2f:85:25:c1:23:52:1c:95:16:48:3a:c4:0b:
bf:6b:52:1e:5b:a8:5a:2d:f1:a8:ec:28:fd:7b:f7:
69:40:1c:e7:25:72:ad:29:b4:bf:04:77:f3:32:ed:
c4:7d:6f:e7:47:1a:47:71:b5:a4:7f:46:14:34:38:
70:61:74:fe:4e:64:73:43:7a:be:4c:91:c0:ce:6d:
88:a2:b4:13:8d:a2:96:07:85:86:45:e4:41:31:ef:
2c:0a:cc:a5:45:7d:85:49:69:a7:2b:72:f6:bd:dd:
36:e4:01:9c:ec:a8:82:76:5a:d8:ff:e9:78:d4:48:
fb:e8:4f:10:e4:51:60:cb:8b:81:13:9b:78:c9:7d:
b6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.148.0/22
93.90.220.0/22
185.58.220.0/22
185.236.208.0/22
IPv6:
2a02:6620::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47723
Signature Algorithm: sha256WithRSAEncryption
62:e3:40:3e:0f:6a:60:cc:f7:b3:9c:70:d4:06:bc:b7:66:a7:
3b:92:64:c2:d7:91:56:89:b2:ea:d3:d9:e3:09:6e:93:de:b2:
ef:48:76:e8:9e:d2:ab:ea:66:9f:58:d2:dc:36:0f:dc:4a:46:
1f:69:f4:27:42:f5:55:5c:6c:4a:4f:7b:56:64:0c:f4:58:a8:
41:10:3c:66:64:7e:d0:43:23:7d:0d:38:98:9b:66:6b:82:a8:
35:fb:95:98:43:ad:65:af:05:e0:c9:69:d2:b3:9d:b7:2f:d2:
17:b9:ab:8c:ef:49:37:0f:a5:2b:5a:c6:26:ff:17:b6:f9:24:
59:0a:d3:d1:51:56:9b:2c:69:2b:2b:4e:11:ce:9a:b4:03:89:
66:2a:fe:80:da:64:32:79:32:10:28:ad:18:87:30:37:0c:cf:
d8:54:18:c0:5f:5a:ff:09:43:1b:40:01:da:c0:1f:6c:ce:f5:
f3:c2:47:f7:4c:f4:38:85:02:8e:2e:7c:d0:7a:6e:0a:c1:fd:
3e:67:ba:13:53:f8:84:d7:d4:02:f3:df:66:85:80:02:a7:a2:
7d:23:4a:dc:77:ef:59:cd:1e:73:a2:82:54:65:a0:be:50:c5:
b6:fe:ee:91:c5:92:cc:d9:d7:49:fb:89:40:5e:51:e8:22:59:
4e:63:34:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:01:22 2025 by rpki-client