Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
File: Uz39bMFAxoo9O7qGulfPO4umqbc.cer (raw, json)
Hash identifier: SfCU0bgIoJQOSWv50rkYP583ygxcHC45jxykVWY6WLM=
Subject key identifier: 53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C27885D5568BAEB7F3A90984891F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198701
IP: 91.238.22.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:27:88:5d:55:68:ba:eb:7f:3a:90:98:48:91:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:3e:de:dc:22:6b:b3:64:bd:a3:9f:68:b9:
a6:64:37:8a:7e:13:c5:2f:15:e7:38:ca:a4:6a:da:
56:cd:03:d6:1e:ab:79:5c:aa:ee:44:4e:10:4a:aa:
28:a0:23:f3:41:a0:44:b1:0c:19:4d:1d:78:1e:1b:
28:f1:b6:ef:c0:df:9c:9c:43:10:40:af:3a:4c:b0:
fe:a3:80:c4:57:0a:c6:49:4e:67:22:4d:c6:00:d5:
38:aa:bc:2f:8b:46:dc:37:88:11:3d:99:32:35:8e:
cd:df:4a:d4:d2:07:a2:a1:71:1c:28:5a:be:1b:cc:
6c:d7:c1:cc:e3:c9:ce:5b:4f:c4:6a:d9:81:6b:a9:
9e:2b:b3:0f:bc:0f:12:71:59:8a:ca:e7:be:25:ef:
e4:29:50:a0:bd:ea:d2:50:e6:88:58:4f:2c:2b:45:
23:a1:7c:ba:fd:2e:bb:ab:08:2f:b4:dc:07:7c:e1:
1c:e2:fb:ae:f2:ea:14:1d:98:6a:f0:ce:f2:42:5c:
6d:f8:bc:39:5c:98:d9:9e:75:6b:b3:63:94:02:de:
db:b4:6a:6e:bf:f8:67:43:0d:af:5b:95:90:73:d7:
35:f5:9d:ca:a8:e9:3f:b5:d6:b0:7a:91:b3:ae:a4:
da:b6:80:5d:f0:7a:65:af:9e:8e:19:51:8b:40:f6:
ac:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.22.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198701
Signature Algorithm: sha256WithRSAEncryption
a6:3b:71:12:d9:ad:32:b4:fa:ba:ca:cf:2c:eb:85:27:bc:2a:
02:9e:70:4b:89:4e:7d:f4:ec:09:c3:3e:73:ad:4b:6a:1a:54:
36:ed:e1:82:85:66:5e:88:e3:6d:07:1e:09:63:a5:8c:b3:30:
3c:27:50:42:f9:33:0c:92:4e:00:c6:9e:14:18:52:8c:6e:c9:
c3:bb:48:f1:07:a4:71:29:95:35:2d:98:d6:43:fc:13:12:51:
b3:69:bc:1e:f0:03:fd:3f:2c:cb:65:a9:fd:1d:45:19:bc:88:
67:2e:67:d7:60:91:62:35:42:3a:54:78:96:94:3f:43:2f:c4:
f0:fd:15:d9:ae:2f:9f:9f:d6:45:0c:0f:cf:3c:d9:67:3d:98:
bb:a6:6d:ba:fc:b2:f4:1e:9d:ab:b0:0d:73:a1:dc:05:80:3a:
be:73:8e:ee:87:3b:e1:43:f7:72:79:1e:ac:ff:3c:45:90:2a:
ee:5f:d7:3c:6a:75:8c:1e:64:4f:bc:ca:56:7a:56:bf:e3:5a:
4d:90:7c:f3:e0:e5:77:c0:4d:af:e0:34:33:22:38:c4:dc:58:
72:21:d7:da:33:01:83:de:29:3b:87:dc:cb:8c:94:18:8f:a3:
4b:81:c5:f8:a2:58:90:cc:e7:40:09:60:7c:a7:2f:1a:8d:bb:
21:3c:58:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:29 2025 by rpki-client