Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sqk04w2mkOdRcTO30hJjJlWnS4c.cer
File: Sqk04w2mkOdRcTO30hJjJlWnS4c.cer (raw, json)
Hash identifier: 2aLKjHXtlyF86HtHmPsNd0gWxpoKKeKAHbR8ajrhVYs=
Subject key identifier: 4A:A9:34:E3:0D:A6:90:E7:51:71:33:B7:D2:12:63:26:55:A7:4B:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421441F9C340CC69FAE1853B068B9E2F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210557
IP: 176.126.97.0/24
IP: 2a11:e740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1f:9c:34:0c:c6:9f:ae:18:53:b0:68:b9:e2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4aa934e30da690e7517133b7d212632655a74b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4b:ef:9a:c9:a2:fb:fd:4c:85:bb:a2:65:8a:
f8:f7:12:6c:e4:c2:b4:03:54:94:87:6b:8f:9e:cd:
fb:82:7c:69:d8:6d:56:52:41:bd:97:0e:a7:c8:76:
84:c9:13:cf:c8:00:1f:7b:63:ec:26:4d:37:b5:56:
21:71:13:0a:33:07:19:fd:9a:18:63:4a:27:7a:83:
91:40:71:aa:f4:a1:53:d3:31:03:71:2e:f6:b2:85:
6b:4f:32:fc:2b:1d:c7:a4:bf:db:e2:63:7e:89:55:
8f:07:d4:63:e8:15:9c:76:9b:a7:94:c5:6d:d7:6c:
8b:09:06:be:75:79:f3:99:b0:ca:6e:04:65:c5:26:
54:55:a1:be:9c:ea:2d:59:fa:a8:68:cf:84:14:98:
04:c8:01:5a:fb:f2:c8:c4:56:aa:83:12:df:67:ad:
71:28:1b:c8:48:2c:8e:11:5a:f2:ec:99:8a:7b:62:
9f:d3:e6:84:59:55:65:f3:b6:b7:71:fc:ec:0d:ff:
9c:d4:88:d8:82:d6:35:c7:75:3c:28:f5:12:11:03:
e2:1c:14:c3:14:47:11:46:75:53:67:34:7e:8e:86:
21:31:c5:bd:85:bc:4b:28:78:65:54:82:e5:d6:90:
4f:74:5c:be:be:ff:24:49:0c:e5:5e:06:89:09:24:
2b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A9:34:E3:0D:A6:90:E7:51:71:33:B7:D2:12:63:26:55:A7:4B:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.97.0/24
IPv6:
2a11:e740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210557
Signature Algorithm: sha256WithRSAEncryption
65:df:5f:ab:a0:0e:ac:e6:56:54:d1:df:62:b2:4c:8f:11:73:
fa:c4:0c:f7:98:95:dd:07:da:9b:f1:c4:70:81:af:12:b8:59:
89:bf:cb:ea:5d:37:68:bb:e7:f8:6a:dd:64:85:1d:38:9e:a8:
dd:cc:39:10:2e:6e:46:8c:14:8b:d1:be:06:e0:5c:5c:7e:1b:
0c:ca:17:ff:6d:11:25:1c:5c:ef:51:bf:47:28:c3:c6:fb:22:
89:53:76:d2:3e:11:9d:b2:7d:13:3f:f5:a5:01:1b:8f:b3:ac:
bc:44:b2:f4:26:e3:3b:28:98:a0:d5:87:cd:87:13:21:0f:b7:
94:cc:3e:a3:5f:e5:0c:c1:52:57:09:74:2c:84:7e:5f:a7:c5:
35:35:20:c2:da:74:b4:89:e9:07:75:0b:34:19:7b:97:65:fa:
66:00:61:99:56:2e:ed:33:5d:4f:c1:db:a1:54:ab:06:30:9c:
bb:b9:d0:5d:f9:6d:48:14:5c:6f:53:43:09:37:6e:c0:c7:b8:
c2:23:f6:80:58:ea:a5:e6:e2:cb:f2:55:41:0c:92:1d:49:37:
6e:8a:61:f1:33:c9:9a:4d:fd:b8:e6:7d:1f:91:7f:f9:7b:2c:
f8:23:94:a7:62:88:ba:22:80:20:a0:a5:05:0b:c5:7b:23:f0:
03:37:eb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:33 2025 by rpki-client