Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
File: XQwn-FWB4ue94MmPvVS-HUlnBRc.cer (raw, json)
Hash identifier: 4HZ7qUAOPptkdiKVy0E9/Mp6t0Kk8xVP8tB7X1CxkQQ=
Subject key identifier: 5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BDF0C0EDE22529B6EC42C9A651AE3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48159
AS: 49666
AS: 50722
AS: 50992
IP: 31.193.112.0/21
IP: 178.251.208.0/21
IP: 185.1.77.0/24
IP: 185.11.88.0/22
IP: 2001:7f8:a8::/48
IP: 2a03:57c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:df:0c:0e:de:22:52:9b:6e:c4:2c:9a:65:1a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:e1:bf:6f:3c:8e:b4:3a:36:d9:5d:1f:de:
83:00:36:5f:91:3d:c3:a9:16:e0:ce:3b:af:75:fb:
d7:ba:60:95:dc:31:db:a1:1f:61:0f:7d:ab:0f:3f:
50:7e:93:08:62:10:68:8b:34:19:90:27:5a:43:a5:
45:a1:94:18:9d:f1:cc:83:c3:aa:5f:07:0b:dd:fb:
29:2d:94:f4:cf:f4:03:52:e0:4a:1a:4d:65:37:ed:
7e:2c:24:5a:b3:2a:73:c7:be:3d:98:86:16:8c:b9:
92:17:c2:da:88:28:23:c1:17:92:80:31:bf:49:3b:
06:a9:6b:a9:ed:52:23:63:10:1b:dc:04:77:77:9f:
6d:bc:20:b7:55:c2:94:08:f2:33:0e:83:35:6b:0a:
c6:7c:73:7b:6a:eb:84:0d:d6:68:53:2a:8c:0e:4d:
4a:34:c4:cd:c1:ed:6e:f0:54:a1:8e:e1:7a:61:78:
df:0b:1c:f4:96:ef:e8:60:23:d5:14:9f:61:ec:8c:
36:21:55:ad:17:c9:6b:90:eb:16:c0:75:3b:e9:52:
b9:1f:1a:36:98:43:f4:dd:ff:40:c8:83:e5:d1:64:
45:9d:f0:3b:52:bd:6c:00:3b:8c:d3:73:9e:06:16:
0f:f0:b3:9a:db:36:eb:ad:c4:01:95:58:86:83:3b:
0d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.112.0/21
178.251.208.0/21
185.1.77.0/24
185.11.88.0/22
IPv6:
2001:7f8:a8::/48
2a03:57c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48159
49666
50722
50992
Signature Algorithm: sha256WithRSAEncryption
a1:d9:90:dc:9a:74:dc:d0:81:e2:57:a8:05:29:ee:71:71:08:
4d:9f:ef:97:58:71:57:fe:bf:89:e3:66:b2:3e:df:d6:25:f7:
a8:ce:c9:ee:7e:a4:22:2b:f9:51:35:f7:0c:0f:d2:21:db:3e:
f4:f0:cf:8d:ec:9e:6d:a3:a9:95:90:6d:fb:22:ee:72:53:8b:
a1:5d:43:ac:2c:ba:81:ef:0a:bf:fd:97:2e:c4:3c:30:13:77:
89:52:32:c7:5a:56:25:e7:c1:ce:5b:a1:e5:d5:57:7b:13:66:
9d:3d:ac:89:44:ee:fc:c8:fb:ef:6e:df:0e:29:ac:09:90:b8:
0d:a6:71:06:95:79:db:6b:92:bf:b7:fd:2d:fb:de:03:97:72:
1b:f5:91:8f:26:6c:5c:05:8a:fd:ba:cf:d6:d2:67:50:a8:51:
ad:f6:d2:9f:db:5a:9b:2d:10:13:d3:c1:fd:c4:81:35:3b:e5:
e2:1b:12:49:64:c6:78:08:e9:a0:62:09:19:1f:6f:85:1b:ce:
22:59:43:70:98:56:d9:b6:23:dd:4e:a4:a8:4b:a8:2b:95:6b:
e1:57:e2:ee:b0:b7:d8:ed:a4:e2:b7:60:c9:9d:31:9a:fd:37:
a9:89:8c:08:1c:cd:50:cf:7e:c3:ef:38:c5:c3:46:72:18:0e:
9a:7e:02:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:57:08 2025 by rpki-client