Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
File: Vf5QzPzvDofMGfgswJK7m3mj468.cer (raw, json)
Hash identifier: k7t3lvbk5S2X50+8Lo1ZHC1J/HSkQV8pvpdCIrjNHXY=
Subject key identifier: 55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1FD8DDCF842CEBFF8EB1E0C8C5DD0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51098
IP: 194.116.136.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:fd:8d:dc:f8:42:ce:bf:f8:eb:1e:0c:8c:5d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fa:34:4f:23:34:8a:c3:ba:2a:20:27:56:cb:
f5:0b:fe:2d:f4:f3:e4:da:84:1f:7a:a7:74:02:2d:
a2:80:9b:e0:14:b4:5b:52:38:fe:30:5f:bb:05:32:
99:59:1e:61:2a:f0:8f:c8:c3:27:54:75:9d:f2:1b:
5a:49:eb:14:5a:53:8a:ef:3e:21:d3:18:04:cf:3b:
44:88:28:c6:1a:50:5f:16:81:09:d8:1a:f0:81:fa:
97:6c:e9:12:b9:1a:3e:b5:e6:df:80:80:c4:3a:b1:
a3:9f:43:e0:86:b7:5b:4f:f8:b4:85:6d:c2:d9:14:
ea:e4:bb:cb:23:1d:90:3a:6f:70:33:41:0b:ef:24:
4a:e5:cc:53:e3:c2:37:d4:02:50:ed:2d:e1:80:bc:
24:01:f0:50:cb:32:03:d9:62:75:ec:3f:d3:4f:8b:
52:d3:82:15:b1:2c:5e:42:e3:80:81:6e:7f:ec:42:
fa:75:cd:2d:2d:4a:23:03:e1:1e:79:b0:09:74:3d:
8e:bd:7d:d3:45:ec:c9:1d:5c:12:f3:7a:36:a3:8a:
34:08:d7:e0:8a:60:a2:c2:c6:07:9f:c5:e0:f5:a9:
04:93:55:a2:ad:c4:54:46:73:d8:54:da:91:f8:bf:
0d:71:7f:a1:ba:c9:01:de:41:5b:b9:24:8e:df:d2:
f4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.136.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51098
Signature Algorithm: sha256WithRSAEncryption
ad:3e:ec:0b:b5:35:ca:ae:0c:e7:89:82:c3:b4:ca:9e:ee:ac:
74:fd:e5:cb:c1:7c:e5:c1:43:94:78:96:7f:8e:fe:e7:aa:14:
41:7c:5b:b7:f0:28:fc:30:69:eb:84:39:76:81:97:0a:ea:eb:
2f:bd:b2:d1:a4:87:58:6b:7a:f9:bb:c8:56:9b:54:a5:4e:23:
ef:81:a9:51:d0:f3:af:e9:26:ba:c7:8b:7b:77:38:9b:6d:6c:
a4:f7:ad:13:b9:1f:ae:29:27:62:57:54:68:e5:c3:7a:3b:00:
44:78:7d:27:9a:14:23:7d:3e:99:c9:c9:2a:90:b1:aa:26:c5:
c6:97:d8:97:b9:ed:38:74:50:d4:dd:22:23:a7:59:fe:89:0e:
27:46:e5:40:ee:63:73:67:40:f0:7e:34:6f:5d:56:4e:cb:89:
b7:5a:39:c7:ab:6f:6e:25:9f:4c:af:f6:83:f0:19:b9:fc:93:
02:a9:49:3a:8d:c1:c1:03:39:94:56:f3:65:0d:96:40:8f:a6:
f3:a5:78:32:b9:9f:b9:61:b7:9f:ed:1f:84:dc:09:43:5d:aa:
32:a9:33:15:eb:84:cb:1b:37:2a:54:16:86:ff:8f:0e:79:58:
99:f3:45:7f:6e:03:39:20:62:d0:41:57:c6:87:fd:fb:ae:65:
52:cd:0d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:04:10 2025 by rpki-client