Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SkB8o6avRpoxu1IDD82RHJHmbBs.cer
File: SkB8o6avRpoxu1IDD82RHJHmbBs.cer (raw, json)
Hash identifier: gHisj2n0Z/UzhpfbrLmP6ZQKjP6PPi4UpDiPJvXMD3Y=
Subject key identifier: 4A:40:7C:A3:A6:AF:46:9A:31:BB:52:03:0F:CD:91:1C:91:E6:6C:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5D3ED6D2232A0A85AC57CA92B5A19
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8803
IP: 193.5.172.0/22
IP: 193.8.176.0 -- 193.8.181.255
IP: 194.124.217.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d3:ed:6d:22:32:a0:a8:5a:c5:7c:a9:2b:5a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a407ca3a6af469a31bb52030fcd911c91e66c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:0c:d9:85:4f:1c:8f:53:a0:94:23:d4:a0:
66:97:1f:12:d2:15:17:f9:7f:c4:b7:43:eb:66:4f:
82:66:cf:d3:ff:62:ce:88:86:55:76:28:55:13:9f:
26:35:37:33:a4:d2:1f:26:a1:67:9e:bd:a5:dc:ef:
79:6f:f8:04:b5:b9:a0:47:7a:8c:ac:e8:f8:c3:22:
09:9b:e8:27:9f:a2:49:46:bd:02:4a:03:60:f3:7f:
5e:46:b8:da:34:06:c1:31:bb:09:a8:76:28:07:bc:
87:a1:3c:30:3b:ba:7e:ed:bb:63:15:1a:7f:f5:7d:
3f:43:bc:99:94:90:3d:96:3e:aa:e8:26:52:45:aa:
57:4f:fc:6f:60:9f:7e:2f:9b:19:bb:48:3a:a5:2f:
96:6a:72:29:91:e1:ad:8f:9a:0d:b6:b5:f4:59:39:
b3:03:46:73:e2:af:64:6f:c8:b6:dd:72:02:93:e1:
7f:c3:a4:c5:5c:b3:a1:50:af:d1:11:42:3d:56:7a:
8f:c2:0d:2a:61:c4:2f:51:cc:c3:ff:b2:d2:ed:38:
41:38:3a:6a:0a:07:04:da:53:0e:9d:2a:9a:66:e0:
37:b7:4b:14:d1:77:34:a3:61:89:29:ab:b2:5f:55:
fe:19:21:37:87:dc:6c:61:1a:70:98:39:f2:be:dd:
a9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:40:7C:A3:A6:AF:46:9A:31:BB:52:03:0F:CD:91:1C:91:E6:6C:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.172.0/22
193.8.176.0-193.8.181.255
194.124.217.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8803
Signature Algorithm: sha256WithRSAEncryption
67:f3:ba:0a:87:39:8a:f9:12:db:8d:9b:8e:01:b4:74:93:2c:
11:99:d4:69:b3:2f:c3:85:ec:1b:93:46:53:ff:61:b4:36:13:
42:51:e2:ff:dc:0e:b9:a8:ed:17:00:65:f4:c1:c0:74:b2:98:
46:2a:6f:43:8b:e1:76:af:c4:0e:b4:99:b9:9f:c0:0c:3d:3d:
34:7c:6b:a6:a8:4e:e4:05:fe:3a:68:51:47:f9:16:24:43:69:
c0:5f:7c:98:8c:f0:10:da:d2:f2:6b:58:f8:a8:66:27:86:e4:
18:8f:d4:f9:cd:50:9f:58:2a:42:e6:86:95:55:28:53:2a:8a:
fc:b3:8c:7f:05:e8:e6:b1:fd:ca:5e:c6:1b:40:c3:a9:09:08:
6f:2c:91:e3:23:9a:b9:dd:20:51:51:9a:10:ee:67:d7:4b:42:
e8:7e:b6:6c:47:23:40:23:d7:04:48:f6:3a:be:ed:33:ec:c8:
f0:7f:6c:f5:f2:55:97:21:34:ab:1d:e3:98:13:b2:31:d0:9a:
46:63:0e:9f:d5:c9:b8:16:f2:8c:1c:7e:78:37:71:75:03:f3:
cf:88:55:25:6b:de:3c:9a:96:d2:f7:41:6d:f0:24:62:c6:b1:
50:52:15:33:36:67:a2:f1:4e:78:70:b3:01:fe:65:5f:e0:26:
22:3f:8a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:17 2025 by rpki-client