Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer
File: TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer (raw, json)
Hash identifier: oWZbP6/gGP5KvB7O/nasoRqqJg1eaWlgERt2XiZQfr4=
Subject key identifier: 4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA7E68A46D0581BDE17B2EA7E97D26
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209529
IP: 185.228.220.0/22
IP: 2a0e:70c0::/32
IP: 2a0e:a540::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7e:68:a4:6d:05:81:bd:e1:7b:2e:a7:e9:7d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:8b:d3:dc:1f:c1:a7:2f:67:17:51:88:6f:
fc:7c:9b:c1:32:10:d1:7a:c3:57:cd:e5:51:7c:09:
4e:eb:0d:87:87:59:cc:e4:93:92:04:48:fb:3f:27:
b2:5d:61:db:3b:f2:8c:6f:97:f5:da:37:3f:0e:57:
1f:53:b3:2a:5e:0b:24:f8:bb:59:9d:4e:f2:df:e0:
51:67:69:fd:93:39:d7:e4:75:5e:2b:b8:4c:06:10:
7a:ea:9e:ee:25:d5:e2:4d:0b:d6:ea:f1:5b:69:40:
85:83:a1:a3:58:19:4f:a7:02:1a:45:b4:cf:67:75:
6b:a9:4a:3e:15:68:75:b5:f5:20:12:0e:f7:4f:b9:
a7:5c:41:fc:c8:e2:b4:c9:e3:42:33:20:39:87:2c:
6b:ec:c3:94:16:f9:dd:07:74:a4:db:d8:b9:5c:c2:
6b:20:20:4a:aa:a4:69:31:b9:1f:d6:29:aa:ad:ad:
5e:bc:fa:98:9c:52:52:b9:f3:b0:0c:68:77:5d:d4:
87:74:ef:bc:7d:d4:47:58:c6:64:1e:70:a1:90:bf:
f9:5e:e4:58:12:17:8c:d5:aa:6d:ff:e3:74:a2:8f:
0e:b9:c6:63:da:02:4d:ba:cf:40:a6:45:aa:b1:cd:
ac:62:33:ee:ab:6f:c1:f5:eb:0f:9b:6a:6c:53:d6:
e9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.220.0/22
IPv6:
2a0e:70c0::/32
2a0e:a540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209529
Signature Algorithm: sha256WithRSAEncryption
4a:51:0a:c9:a2:23:f5:9f:1e:3b:41:59:a4:45:57:9c:9c:09:
66:c7:88:83:af:c6:44:48:0d:ca:ab:67:8c:d9:87:b3:30:ed:
87:a1:ed:59:0f:aa:be:78:29:a1:bc:eb:87:09:0e:07:13:f9:
2b:3c:30:6a:37:cf:c8:f1:06:26:58:d7:0b:15:f2:f6:a0:b0:
20:fe:cf:03:d4:87:86:0e:fb:e6:20:37:ff:92:73:02:97:a8:
0e:c7:a1:d5:fa:a2:2d:02:a7:6a:08:6e:5e:14:66:1e:20:c4:
18:ba:3a:de:f6:be:db:2a:f4:47:c6:df:41:d3:8a:8e:98:b8:
15:85:d0:11:4a:1d:f6:8f:da:9d:31:a4:43:78:b2:1f:29:06:
70:bb:01:7d:7e:62:1c:6d:45:91:bf:da:b1:c9:87:ed:c2:c9:
ef:51:d0:13:c5:0e:e5:c0:de:db:ef:61:68:3c:24:02:23:b1:
ae:33:1f:71:be:71:27:e7:24:e2:c3:6f:0b:f1:6d:9f:8b:ef:
98:9d:04:b2:a1:b7:cb:12:c8:7b:6d:08:3a:d9:d2:f2:b3:be:
d2:4f:24:4f:bc:d1:8c:db:b7:82:2a:c8:54:47:31:e5:c4:cb:
7a:7b:68:8a:b8:f0:41:bc:c7:ce:89:3d:b4:67:03:43:17:96:
2c:c6:01:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:45 2025 by rpki-client