Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer (raw, json)
Hash identifier: 01UoPy7LF+P5gZEMBHxcPLEZt0up4YuriAEMLTVJy/o=
Subject key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D73D89CC980A1B98C333AF4A003124
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60979
IP: 185.22.68.0/22
IP: 185.70.120.0/22
IP: 2a00:6160::/32
IP: 2a03:36a0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:3d:89:cc:98:0a:1b:98:c3:33:af:4a:00:31:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:2f:4a:34:2c:27:c0:72:1f:ba:53:ce:6a:
c0:41:ac:17:65:43:29:29:e2:34:ff:bf:38:fe:da:
9f:8c:79:fa:c3:00:79:e2:04:2f:9e:6a:5b:fe:08:
d5:a5:1c:72:f7:87:08:05:b9:87:4a:c9:ae:85:aa:
eb:5e:41:d4:fb:36:73:c4:d8:0a:13:c3:81:79:57:
47:c5:90:c5:54:ee:ac:9e:83:3a:3c:6a:70:e9:b2:
87:f4:b5:82:b0:37:19:be:37:f3:e9:6a:fe:f7:70:
a8:84:2a:14:48:26:47:fa:9f:3b:5b:04:cb:68:4c:
48:9a:10:d2:4c:72:42:cd:a2:8c:50:30:45:c1:26:
72:cb:24:05:a3:ed:35:97:e8:3d:1a:b9:85:a3:bb:
14:e2:ea:ac:04:19:4f:c9:5d:f0:5f:e0:be:ce:39:
2d:d9:c7:e3:28:9c:de:8a:6e:f8:db:a5:5c:bc:c4:
88:c0:89:16:2f:79:36:9c:b4:43:26:bd:4d:61:59:
df:be:d0:96:9b:63:38:d2:0c:0d:85:b0:f0:5b:9b:
0c:3f:f9:e0:a0:81:63:28:75:d8:17:93:18:19:61:
fd:ea:46:55:cb:4d:65:f7:2a:f1:4e:18:05:50:07:
b9:12:be:51:49:e2:45:9e:da:63:0a:5d:42:09:e7:
07:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.68.0/22
185.70.120.0/22
IPv6:
2a00:6160::/32
2a03:36a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60979
Signature Algorithm: sha256WithRSAEncryption
01:01:bb:e7:55:8a:2f:7f:60:10:53:70:45:94:7b:c1:90:5b:
c9:28:c2:6a:e5:7a:10:71:ea:49:12:bd:fc:9d:2c:6d:58:3b:
1d:0f:6d:ea:a4:9a:2e:d3:57:8b:2c:0c:54:14:90:09:e9:68:
11:30:b0:ed:ef:e2:4a:ba:cb:41:48:fa:74:90:96:3c:6d:20:
4a:59:7c:74:d1:9a:93:03:8c:9f:66:d7:2a:0b:14:81:91:b0:
08:4d:ce:2a:b3:a9:ad:25:90:a3:75:14:ca:be:52:cd:90:49:
0b:19:68:5c:42:8d:01:cc:06:b7:96:c8:e6:9d:1f:64:03:9a:
5c:58:33:13:6f:43:6e:09:d3:87:56:1f:3b:d8:26:1b:44:66:
c4:dd:09:20:2b:d2:17:47:bd:c7:5e:56:0d:33:2b:9c:33:88:
a9:74:80:9d:22:f1:7d:f3:89:21:4e:1b:ad:ec:c3:31:26:80:
fc:68:38:0a:87:f4:db:e8:d1:43:55:4b:3b:c1:2a:d5:d4:cf:
ee:66:e4:91:b0:b4:ee:f5:19:96:7e:2a:56:a1:1a:1d:bf:c8:
a4:b3:40:12:8b:d9:b9:79:53:a4:dc:b0:42:70:f3:79:5e:30:
7b:0b:2b:b7:b5:03:1b:64:0b:1b:33:5b:78:52:e4:12:ac:24:
0b:9e:fa:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:58:46 2025 by rpki-client