Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
File: Xw3wyOXRsjU4vrXszDqxKGXffqo.cer (raw, json)
Hash identifier: izmSeEIM+utw5kWnOPpIKv/6HO55lUhfaJscmUvSEjM=
Subject key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B387C79D3EF6F544438F43C5FB2D88
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199641
IP: 45.143.124.0/22
IP: 2a0e:e3c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:87:c7:9d:3e:f6:f5:44:43:8f:43:c5:fb:2d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:82:13:36:00:29:a4:b3:08:f3:40:9c:a1:93:
37:b5:50:65:b2:81:1e:ca:8d:dd:19:ac:b1:37:e0:
34:9a:bb:b0:75:dc:8c:00:0b:5e:7a:ee:5c:9d:17:
20:f8:53:10:6a:8f:de:0e:3a:c0:32:f2:3e:5e:a3:
fa:65:2e:f9:0d:45:d2:73:b6:a5:80:5e:5c:6f:b1:
1e:69:e7:44:79:ea:6b:00:37:96:32:75:f0:21:bd:
e4:70:9d:7e:8a:ae:ac:16:26:b2:c1:85:ae:27:e7:
39:6f:60:e5:4c:94:43:84:1f:d2:11:3d:87:1a:3b:
d0:62:55:1e:c7:84:c2:bc:62:ce:5b:2a:4b:46:e2:
69:fa:e4:ad:c4:bf:de:65:4f:11:14:9b:4f:23:a4:
87:ba:4e:c1:9c:3f:53:53:42:32:ba:e7:29:b0:31:
ac:e9:dc:84:ff:0a:fc:82:cc:99:9f:8a:e1:35:37:
15:df:41:38:90:41:9c:98:73:24:49:d4:f7:b0:af:
55:1a:77:28:5b:e9:73:fb:24:97:c6:af:5e:e9:e1:
83:9e:e5:f9:d7:fc:05:f5:41:57:fa:38:2c:31:21:
50:42:ab:2e:d6:d8:cc:ab:1c:97:b3:2f:3f:ad:20:
2b:a5:03:b2:f6:6f:c4:84:aa:4f:eb:87:36:d8:cc:
7d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.124.0/22
IPv6:
2a0e:e3c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199641
Signature Algorithm: sha256WithRSAEncryption
07:c4:bc:50:d9:d0:25:f0:3a:3a:f1:69:a6:a3:44:0e:9f:6a:
04:98:b1:79:be:77:e0:6e:61:4b:fa:25:77:55:2e:f2:4c:7e:
ee:ca:5b:9a:4f:4c:73:19:5e:4d:a6:2d:30:42:e0:dd:d0:86:
69:7b:82:af:89:88:0f:a6:01:f8:2b:6e:7e:e2:81:6c:87:4e:
b2:9e:ae:43:c8:e0:f1:c9:29:96:7d:86:90:65:9a:bd:c0:1b:
83:4f:74:32:62:ae:28:d2:29:4a:de:b1:1e:5a:37:f0:c1:15:
25:d5:f5:9b:ba:87:39:d3:41:ee:da:7c:57:39:53:33:d5:db:
0c:92:c1:e5:cd:b0:a1:5f:b0:4c:7d:08:10:ec:12:93:b0:21:
7c:4a:d7:9d:ad:63:05:75:40:3d:bb:bc:d3:b2:44:81:11:c0:
10:5d:91:de:13:d6:28:dd:c9:9f:d1:6d:44:a8:38:03:4e:60:
88:13:b1:b3:77:0f:aa:49:f9:7f:8d:a2:da:2d:a8:d4:e1:4f:
f8:4b:33:6a:10:82:34:ab:46:71:03:f0:89:90:fc:e7:b1:bc:
d3:29:1a:c6:77:56:12:fc:3b:d2:54:5d:b6:a8:d9:ca:0b:03:
87:26:7e:b8:58:fb:55:53:b6:af:27:76:9d:cc:c0:f0:34:e5:
12:47:37:42
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQks4fHnT729URDj0PF+y2IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjBkZjBjOGU1ZDFiMjM1MzhiZWI1ZWNjYzNhYjEyODY1ZGY3ZWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoITNgAppLMI80CcoZM3tVBlsoEe
yo3dGayxN+A0mruwddyMAAteeu5cnRcg+FMQao/eDjrAMvI+XqP6ZS75DUXSc7al
gF5cb7EeaedEeeprADeWMnXwIb3kcJ1+iq6sFiaywYWuJ+c5b2DlTJRDhB/SET2H
GjvQYlUex4TCvGLOWypLRuJp+uStxL/eZU8RFJtPI6SHuk7BnD9TU0IyuucpsDGs
6dyE/wr8gsyZn4rhNTcV30E4kEGcmHMkSdT3sK9VGncoW+lz+ySXxq9e6eGDnuX5
1/wF9UFX+jgsMSFQQqsu1tjMqxyXsy8/rSArpQOy9m/EhKpP64c22Mx9HwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFF8N8Mjl0bI1OL617Mw6sShl336qMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViL2UxMWRh
ZC0yMDhlLTQ3Y2MtYmY2ZS1iYzUxM2E5OGI5YmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvZTExZGFk
LTIwOGUtNDdjYy1iZjZlLWJjNTEzYTk4YjliZS8xL1h3M3d5T1hSc2pVNHZyWHN6
RHF4S0dYZmZxby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLY98MA0EAgACMAcDBQMqDuPAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwML2TANBgkqhkiG9w0BAQsFAAOCAQEAB8S8UNnQJfA6
OvFppqNEDp9qBJixeb534G5hS/old1Uu8kx+7spbmk9McxleTaYtMELg3dCGaXuC
r4mID6YB+CtufuKBbIdOsp6uQ8jg8ckpln2GkGWavcAbg090MmKuKNIpSt6xHlo3
8MEVJdX1m7qHOdNB7tp8VzlTM9XbDJLB5c2woV+wTH0IEOwSk7AhfErXna1jBXVA
Pbu807JEgRHAEF2R3hPWKN3Jn9FtRKg4A05giBOxs3cPqkn5f42i2i2o1OFP+Esz
ahCCNKtGcQPwiZD857G80ykaxndWEvw70lRdtqjZygsDhyZ+uFj7VVO2ryd2nczA
8DTlEkc3Qg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:46:55 2025 by rpki-client