Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vg7_HSMWH-qgihmU4d1LRqg4PyA.cer
File: Vg7_HSMWH-qgihmU4d1LRqg4PyA.cer (raw, json)
Hash identifier: yKsKF8MVjq994iZnpl9potPY3jsBKFT12KCSx3e080U=
Subject key identifier: 56:0E:FF:1D:23:16:1F:EA:A0:8A:19:94:E1:DD:4B:46:A8:38:3F:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDC69B7DAB13DD1FB33859AA8EE00B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211210
IP: 37.252.221.0/24
IP: 2a0b:96c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c6:9b:7d:ab:13:dd:1f:b3:38:59:aa:8e:e0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=560eff1d23161feaa08a1994e1dd4b46a8383f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:a6:27:b8:17:d1:ce:52:45:be:11:e5:78:
4a:8b:39:ce:f5:16:8e:f6:e9:a4:be:86:99:a6:f3:
fe:47:a5:0a:01:1c:6e:fb:97:c7:eb:4d:d6:c7:c5:
d4:bc:8e:0f:f4:3e:ac:ba:b7:5d:d1:bc:8a:75:01:
4a:64:53:4e:3e:df:bc:82:96:3d:64:4f:f8:6d:d6:
60:1c:ab:c5:de:b2:7c:d7:f2:32:37:34:fc:f6:67:
0c:80:08:6f:82:e2:da:4c:83:ff:c5:19:f7:2e:fa:
1f:2f:13:90:28:bd:e1:0e:54:b0:68:83:a2:2a:99:
b0:79:c0:a0:c2:89:3e:d9:ea:8a:d2:ab:63:51:74:
82:0a:9c:53:1b:47:b7:14:cb:22:51:73:d0:8d:65:
b3:2a:90:b9:6a:a6:a7:f2:b5:32:be:f5:e5:2a:85:
82:2b:2b:21:87:3c:82:16:9a:fa:7d:b5:0e:2d:42:
d8:06:6b:61:40:8d:6e:72:53:57:89:88:8d:36:84:
78:84:cb:9c:de:9d:52:9f:ce:3b:35:c4:e0:80:6f:
22:8b:48:d3:1a:d0:f0:92:0b:fc:ac:44:b2:b5:a2:
e0:a6:74:a7:0d:69:dd:3a:f8:55:2f:40:15:d5:b5:
3d:30:21:37:10:70:ea:c4:11:b5:8f:c2:83:e7:62:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0E:FF:1D:23:16:1F:EA:A0:8A:19:94:E1:DD:4B:46:A8:38:3F:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.221.0/24
IPv6:
2a0b:96c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211210
Signature Algorithm: sha256WithRSAEncryption
68:3f:c1:d5:c9:c7:97:56:13:6c:68:cf:f5:41:4c:81:b0:fc:
dc:d9:42:38:31:cd:27:56:58:84:af:5a:4c:0f:24:79:df:7e:
16:ca:bc:62:f2:9e:7d:59:10:a6:17:42:e5:e2:b2:ce:2a:d5:
e7:42:08:19:df:c0:61:0f:b6:19:73:39:c9:9e:42:cf:6c:0b:
9a:cb:d9:ba:c4:8f:dd:7b:ac:af:9e:3f:b1:1e:49:4a:5d:7e:
43:98:5d:07:44:c9:84:dd:c8:15:cd:60:eb:17:18:93:f9:96:
8b:7f:e6:4a:b5:ca:7f:d0:c9:72:b9:1c:26:d6:2c:05:21:ee:
ef:95:6a:3e:77:69:d3:8e:5b:71:ac:72:0c:46:4d:e0:5c:7e:
f8:2d:99:1b:29:1b:d1:51:51:9b:b4:af:cf:39:e5:08:24:95:
c6:46:e5:1f:66:05:15:02:1f:66:29:66:76:22:a5:1b:47:95:
c4:14:f1:da:cb:e7:b8:c9:2c:67:75:c7:d9:ce:36:18:03:bc:
59:3b:83:2c:d5:d3:4a:17:b3:14:86:bf:14:cf:15:d2:72:a0:
81:a9:d4:da:53:4f:2a:2f:ef:17:27:87:27:eb:08:b0:a9:2d:
7f:d5:0a:20:2c:1d:4a:f5:bd:b8:5c:60:16:85:6f:39:ba:a0:
dc:02:11:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:57:32 2025 by rpki-client