Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
File: SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer (raw, json)
Hash identifier: S4p3JyxrRMoZ1744/WKlOfI2+bbwqidpRh+38JydPKA=
Subject key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8CA5D64CAC807C0CE06E339EB08FBC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208789
IP: 45.85.52.0/22
IP: 2a0e:b880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a5:d6:4c:ac:80:7c:0c:e0:6e:33:9e:b0:8f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:3f:ef:81:d7:3a:30:24:8f:f8:c5:99:32:
02:28:6f:db:f2:58:a2:fa:67:fb:70:f2:86:ec:dd:
7e:91:12:6a:21:72:c3:80:44:4b:36:fd:f6:be:a5:
e4:2b:98:9b:e1:9a:95:3d:02:f7:75:74:55:d4:b0:
9b:61:8f:69:45:f5:a8:97:11:73:a1:00:bb:ad:07:
26:5d:9c:ee:93:e8:d2:94:47:6a:08:3a:b9:14:61:
6e:db:44:ad:1e:7f:58:56:66:33:8c:62:ec:37:d5:
bf:cb:71:17:d1:65:41:94:31:4a:d9:78:92:7b:fb:
b5:7e:39:47:fd:75:b5:af:11:cd:4f:fd:85:f4:1d:
28:e4:fd:c7:e3:28:4a:23:7d:07:8b:5f:14:69:89:
d7:96:cc:28:79:ad:25:9c:06:6e:a1:1e:03:c8:54:
2d:b9:65:0d:73:a0:e0:44:ec:3b:fb:e6:89:f9:67:
9a:3b:4c:0f:87:3d:f6:c8:2f:61:2e:9a:1b:1f:63:
56:a9:cc:72:a1:31:37:89:d5:9f:a4:d2:b7:e5:4f:
ad:e0:6d:d9:31:88:b8:59:ee:ab:46:0a:e0:69:2d:
0f:f7:71:c7:09:bd:65:de:97:be:2b:42:69:c3:6a:
16:0f:e2:30:74:fa:18:d9:2f:bc:f4:6a:80:4f:ae:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.52.0/22
IPv6:
2a0e:b880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208789
Signature Algorithm: sha256WithRSAEncryption
92:25:b2:33:0a:06:cb:aa:58:7f:2c:14:5e:94:38:d4:03:30:
57:48:58:9f:2c:70:70:6e:a6:45:c9:10:47:37:6d:bb:b9:81:
7b:c3:1b:02:98:d7:10:06:09:c5:15:a1:da:f0:e4:70:d5:92:
20:9d:ad:68:db:00:6b:fc:b6:7f:51:e6:00:aa:f1:40:cb:aa:
fb:01:6f:35:09:bc:43:c9:12:1c:41:6c:d9:14:00:86:1b:5e:
79:f4:50:85:f0:00:17:05:60:bb:44:23:34:02:c8:89:42:11:
1c:02:7a:74:b0:91:94:b5:3a:87:27:1c:82:96:d7:a4:1f:90:
a0:21:70:1b:7a:0b:49:7a:0b:d2:83:c5:bd:5a:17:35:26:3a:
55:e7:af:9f:9c:ec:68:00:a9:1f:eb:fc:5b:ec:49:52:9d:3d:
f6:61:b1:ce:b8:56:2f:c5:5b:41:8a:86:fa:be:26:27:f3:32:
2c:66:13:dd:6e:4e:e3:c1:d8:31:c4:e2:ea:3e:cd:d4:11:ba:
0e:ef:81:20:03:2c:08:63:15:0a:9d:0b:de:3f:3b:88:e5:86:
db:2b:75:52:9e:65:80:6d:ae:42:2a:ed:af:62:57:fa:2d:19:
0d:13:3c:11:ae:89:2c:82:6c:6d:be:28:b3:16:2c:07:2e:62:
41:f4:15:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:07:13 2025 by rpki-client