Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.cer
File: WOQIyFfH-CX_d7yR7Kf_ySGtTf8.cer (raw, json)
Hash identifier: i6w7iTrKtnkXo7YOk3LKZDXOnsG5eWB5PklMxsefXZU=
Subject key identifier: 58:E4:08:C8:57:C7:F8:25:FF:77:BC:91:EC:A7:FF:C9:21:AD:4D:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428252A592F4F53620AB1648AC1D68149
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:51:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 64480
AS: 207092
IP: 89.40.171.0/24
IP: 93.113.129.0/24
IP: 185.84.67.0/24
IP: 185.162.228.0/22
IP: 185.193.12.0/22
IP: 2a0a:3440::/29
IP: 2a0b:7000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:2a:59:2f:4f:53:62:0a:b1:64:8a:c1:d6:81:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:51:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58e408c857c7f825ff77bc91eca7ffc921ad4dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:b5:53:6d:bf:ce:2d:99:98:20:83:33:e6:
82:16:f7:60:4d:9d:e7:22:1f:9c:22:a4:d4:de:68:
88:c0:9c:53:5d:39:a4:0d:13:e2:8d:6a:6a:2d:a8:
44:93:2b:1d:74:1b:fc:3f:22:04:46:78:09:de:ab:
a8:4e:3c:db:4e:e3:04:13:f8:be:b9:9b:ad:7e:36:
20:0f:4b:52:5c:86:fa:80:24:e4:12:75:b6:48:07:
fc:eb:90:db:fb:90:b6:b7:1c:8b:64:c8:e5:6d:32:
de:41:00:b5:1d:8c:29:fc:7b:4c:2a:b0:56:9c:b9:
76:94:44:7f:b5:69:3a:5f:91:22:7c:a2:97:73:d2:
d2:77:b7:93:a4:f2:3b:2f:eb:d6:32:81:92:66:d7:
74:b2:78:06:1f:54:df:9b:0b:01:d3:31:06:85:f9:
82:32:99:0b:9b:62:f4:17:99:db:c1:eb:42:cc:e0:
e4:1c:19:d3:37:87:cd:07:6c:81:2a:c2:87:c4:6c:
5c:56:28:90:5a:11:06:a8:7e:60:51:5e:85:4f:56:
20:9e:ee:26:16:fa:86:11:87:c5:a9:bc:6e:c2:85:
ab:e8:07:06:75:27:56:55:ec:a4:2d:de:7a:99:57:
f7:94:f6:c6:25:68:25:b1:a9:42:f8:9e:b8:c6:41:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E4:08:C8:57:C7:F8:25:FF:77:BC:91:EC:A7:FF:C9:21:AD:4D:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.171.0/24
93.113.129.0/24
185.84.67.0/24
185.162.228.0/22
185.193.12.0/22
IPv6:
2a0a:3440::/29
2a0b:7000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
64480
207092
Signature Algorithm: sha256WithRSAEncryption
29:8e:e8:26:dc:8c:b5:d5:c1:16:dd:4e:bf:a4:1b:d2:f5:dd:
6d:2a:f1:64:c5:1b:b5:82:96:a6:ad:a5:a7:dc:d2:04:0f:e1:
79:a6:85:d6:47:f6:fb:13:1d:c1:72:8e:87:f4:04:43:5e:0e:
9c:ae:9a:2c:25:50:91:dc:3c:77:3a:76:0a:df:67:02:07:53:
32:26:1e:88:b6:fd:2a:8b:e6:23:ec:cc:d5:b5:67:5e:84:8a:
7a:37:39:da:2b:35:e2:ec:9a:80:9d:f3:be:5a:ff:b3:a7:6d:
ed:fa:5c:99:bb:5f:a1:4f:fc:fa:4e:3c:ff:83:f1:70:0e:45:
bf:00:d7:83:3c:12:24:d7:38:9c:0d:af:e9:5f:66:11:ff:7a:
b4:39:d8:e6:31:7b:5a:35:03:44:bd:16:c3:25:ff:88:d4:8c:
74:f1:bf:23:2d:3c:d2:f4:82:8d:2d:82:a0:bb:cb:60:7e:ea:
2a:4f:f2:13:68:82:c9:f5:3a:84:35:4d:ed:4c:58:f2:1f:f6:
34:cd:ea:bf:8c:65:9b:b3:ef:8a:76:85:20:55:46:11:53:45:
49:ce:a9:93:31:4b:70:04:03:9e:30:c5:e2:ab:58:01:dd:bf:
7c:68:e4:26:79:20:34:83:3a:13:39:dc:36:cd:0e:f9:dd:fd:
7a:80:bc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:36 2025 by rpki-client