Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
File: SeUWlMTUa0_MAvrnHl25QqcQjkc.cer (raw, json)
Hash identifier: OvQXkIRkh4nhMIgO0qeh3qob0/63UgBepIqTaEC3WDs=
Subject key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6CE1197E2AB62588D335985877149
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39616
AS: 209408
IP: 45.66.224.0/22
IP: 80.71.224.0/20
IP: 81.29.144.0/20
IP: 194.242.63.0/24
IP: 2a09:6c40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ce:11:97:e2:ab:62:58:8d:33:59:85:87:71:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fb:02:e2:5e:88:3e:42:f9:7a:a6:94:62:ac:
9a:17:fb:33:15:16:6b:5e:d5:46:c2:7e:94:40:46:
2a:e1:e2:1b:cc:ce:10:05:e5:6b:d4:83:f8:75:ae:
6a:8b:ae:60:99:90:ab:ae:f9:bd:fa:0e:c2:88:8a:
6b:cb:63:0d:90:8a:29:42:1d:2c:92:e6:f2:98:51:
0c:13:c6:e6:ec:eb:08:d7:58:45:49:e6:5e:0f:11:
11:36:f8:10:64:4f:6c:5f:ce:1d:19:f1:19:ee:18:
9c:1b:82:c1:44:95:63:ee:34:35:1e:b4:4b:0a:79:
a3:ad:82:2c:4c:95:b2:26:dc:77:15:e2:44:ff:2d:
2b:4b:2f:54:7d:fb:ef:e4:48:55:cc:2b:8f:60:c4:
16:57:08:76:af:25:69:ef:cc:e6:c3:b1:84:8d:01:
28:cd:87:43:1d:85:af:fc:9d:f8:88:62:15:1a:d1:
b1:e7:46:7f:8f:f9:64:0f:bd:d6:25:ae:82:f1:d7:
b2:55:c4:84:6b:c4:1b:83:d0:d4:9d:ba:a7:28:66:
05:c5:7b:51:b2:98:08:18:24:35:86:e9:62:10:0f:
23:e6:44:8c:e9:b2:66:44:20:37:01:62:23:bb:8a:
85:87:55:26:c3:21:d8:52:bc:a5:eb:1d:dd:52:3f:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.224.0/22
80.71.224.0/20
81.29.144.0/20
194.242.63.0/24
IPv6:
2a09:6c40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39616
209408
Signature Algorithm: sha256WithRSAEncryption
b1:48:2d:7b:9e:d3:f3:2b:27:c2:7e:e0:ea:d6:a5:fc:ae:f4:
28:05:46:77:bc:b0:19:08:11:76:4d:59:fa:81:52:4d:cf:ee:
ea:89:3e:22:66:27:35:4a:a5:76:96:ad:bd:14:7e:7b:f8:37:
ac:e7:21:f1:71:37:05:04:82:1f:d9:c9:b2:5a:6a:05:f4:9e:
82:e7:4d:dd:47:07:bb:d0:e1:a5:b9:44:58:c8:8f:b1:36:8f:
20:b9:f3:7c:4f:ec:4b:6b:a3:3d:66:4f:d2:af:e7:9b:9a:5d:
eb:7f:fc:4d:6a:d1:0b:24:d8:51:7b:fb:46:c1:fc:c1:a0:a6:
15:03:6a:ed:e9:97:5b:59:0a:2e:cb:06:3b:61:b1:7e:9d:5d:
0d:ff:ad:82:53:e0:d1:73:bd:fc:7e:78:7c:29:59:f3:5a:07:
c2:28:26:d0:1b:ff:b5:60:87:f7:ad:ee:b2:e9:b9:da:e1:db:
4c:76:ec:93:32:62:f3:10:a2:a9:18:2d:f7:03:b8:07:d6:58:
3b:97:f9:26:67:5b:76:f5:0b:79:33:20:68:92:9b:14:c1:a0:
24:13:5b:7c:f0:c6:b6:d8:1c:14:eb:1d:6f:ff:88:a0:0f:eb:
98:37:94:ab:0d:1a:63:1f:fd:ab:05:0a:35:84:25:70:f4:15:
88:f6:6e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:50:19 2025 by rpki-client