Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
File: Xpidr2T6291TSPfdIm7Mn-_ARRU.cer (raw, json)
Hash identifier: JicuTIcHeZ20YUrD2pmuNxFuXxN5bh8Z5VDx0m53PQE=
Subject key identifier: 5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194282526C6184196E55FE375659BEDAC5B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:51:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205602
IP: 2001:67c:fd4::/48
IP: 2001:67c:fd8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:26:c6:18:41:96:e5:5f:e3:75:65:9b:ed:ac:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:51:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:80:a0:7b:ea:61:ae:a3:e9:7a:3f:e8:cb:
d7:69:05:e8:b2:15:cf:65:fd:7a:f9:1a:53:a0:54:
3d:9e:78:80:4e:0e:b5:6c:bf:42:9a:f7:c7:76:3e:
65:24:24:a5:fe:f3:35:5a:15:e1:e8:44:34:0f:84:
69:48:e8:a3:44:55:fd:23:a7:6d:63:bb:3b:bc:01:
ea:d6:f9:17:77:22:3d:c1:a6:8f:a2:c9:6b:bf:03:
ad:fe:31:28:7f:75:dd:73:45:72:ec:cc:37:ef:07:
a4:b4:f5:5d:ef:ec:3e:2b:c5:bf:25:49:3c:9b:bc:
97:76:b4:03:2d:f0:9c:15:ca:8d:74:1f:7c:07:52:
9c:f5:14:f7:3a:55:82:4b:62:ce:b5:57:d6:b0:b1:
a3:e6:79:64:ba:4c:e9:07:60:2b:7e:72:e9:59:46:
85:db:44:f0:f0:52:36:46:a7:02:76:31:dd:a8:51:
ad:9e:ac:9f:94:5d:ea:75:4b:bc:a2:0d:1c:ff:a1:
46:02:e2:eb:fd:f6:e7:1b:99:d2:e6:5a:87:29:7b:
2b:4b:23:4d:a9:53:5b:78:65:c9:d3:a9:87:9b:6d:
5b:68:34:3e:63:9d:7d:33:71:b0:b5:88:67:ff:34:
0c:f6:61:10:c3:2a:ea:7f:f9:55:ae:3b:1b:4d:84:
74:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:fd4::/48
2001:67c:fd8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205602
Signature Algorithm: sha256WithRSAEncryption
92:7b:43:3b:41:29:fd:8a:f6:d7:7b:ac:95:74:48:d4:77:d2:
dc:0c:cf:a3:2b:cf:d9:2d:18:31:4e:c4:d6:d9:08:38:b6:0e:
d0:da:bb:c5:b3:8c:f3:62:48:a7:b8:71:c0:de:e2:85:4b:36:
59:4c:6a:be:6e:3f:4b:2d:89:06:cd:e4:bd:c3:83:ea:60:c0:
58:41:b4:c4:a9:8f:1b:75:bd:d0:50:c9:4e:3f:23:49:a2:b1:
41:50:56:77:4e:9a:f5:db:7d:17:8d:9e:76:88:df:c1:7c:ca:
92:c7:44:4d:c1:de:b4:cf:77:78:74:2f:e5:dd:f9:e5:aa:65:
8b:d9:98:01:c8:20:a8:b3:2c:2c:84:e0:5f:e1:3a:1b:15:43:
8e:f9:69:61:23:62:52:d2:22:80:ec:e9:2c:e6:ea:40:ba:74:
0c:79:69:28:00:29:70:bd:7e:e7:d1:21:28:b3:f6:8f:f1:b4:
be:3b:04:48:81:d0:c6:56:05:cd:1f:c7:0b:8c:37:f4:25:a4:
d1:91:44:be:45:2c:f8:db:a9:8e:f4:79:1a:52:81:f5:54:d3:
7d:86:00:c7:0c:29:34:27:ee:43:07:7b:ef:07:1d:95:da:a5:
d7:1a:83:d4:2e:12:cd:d2:3d:48:5b:d3:45:80:41:7e:38:eb:
37:4a:26:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:53:59 2025 by rpki-client