Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
File: ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer (raw, json)
Hash identifier: QgLP2/WEfydz2GUBF3cPVv4vtmuBHnkBO34ACMQZoAU=
Subject key identifier: 64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421440C7B01FC01EF442F5BC8D5A7CFD0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207294
IP: 188.190.124.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0c:7b:01:fc:01:ef:44:2f:5b:c8:d5:a7:cf:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:ab:8a:e8:07:19:89:b0:c6:96:10:40:dc:
47:63:46:44:33:d7:80:c5:24:e0:4f:ed:4e:46:22:
dd:f0:4f:74:54:b4:06:81:ab:fc:4f:e8:b8:b0:44:
eb:a9:58:11:b1:55:3d:a3:e7:d6:8f:ff:67:ca:72:
d5:14:ce:d9:c5:43:c0:0f:5e:eb:ae:82:9a:5f:9b:
32:aa:6c:31:2c:6d:7f:03:54:a4:35:65:39:f6:58:
5c:75:d9:d9:76:69:60:12:53:4d:5d:27:3d:1e:01:
93:1f:de:d4:a5:2d:29:7c:02:15:60:19:ac:c7:40:
53:49:3e:2c:7d:44:bd:2e:86:b8:b8:04:e5:95:52:
1b:00:9e:83:b4:60:ae:75:00:c9:48:5f:9f:d9:cf:
79:74:2c:4b:3d:7b:fc:1a:2b:07:9d:bc:ad:f4:c4:
a5:86:d9:d2:fe:c2:b2:fd:35:22:dd:78:28:8e:34:
a1:ed:8d:14:5f:57:ce:52:3e:89:b9:c8:d2:12:c1:
08:13:d4:4b:6a:96:f6:68:01:d1:3b:21:18:d5:28:
c1:6f:27:4e:a8:57:fb:fc:fb:de:b6:d6:f5:21:ea:
84:7b:f0:20:3f:21:39:38:6b:d5:11:b4:d5:73:1f:
54:2e:4a:cb:07:dd:cd:ab:c6:33:8c:3d:c4:e8:41:
9d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.124.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207294
Signature Algorithm: sha256WithRSAEncryption
68:f7:c1:96:00:b9:48:70:f3:47:74:5f:41:4e:c9:00:98:a9:
d2:e6:80:e9:08:42:c9:81:ad:97:7d:1c:07:52:02:04:f2:f0:
5f:2c:9b:93:88:b5:2b:67:11:21:95:58:a9:1d:ae:a8:e1:6a:
f2:0a:43:77:99:d5:15:51:57:0e:6c:42:b5:58:6a:f8:86:eb:
5c:de:30:94:27:2b:47:90:75:2c:a4:db:25:7c:a7:b6:90:26:
cf:16:63:c6:e1:37:94:bb:c2:fa:a8:be:a9:ca:02:05:3b:93:
66:7d:a1:89:02:20:f6:09:4f:81:c3:77:da:ba:93:8d:69:dd:
1e:aa:15:b6:26:27:ad:c8:2a:65:1a:ee:97:5a:5f:a2:b8:34:
ee:c0:b9:a9:ab:4d:50:ba:06:b4:cd:ee:64:1b:d4:27:2f:56:
6e:26:0d:30:b5:00:e7:6a:c5:1a:1e:30:5f:3d:d9:fd:e5:da:
ed:f3:db:35:b4:07:f0:ac:40:5b:61:fe:5d:ae:24:30:04:6d:
66:7d:24:60:9e:c3:05:47:42:0e:8a:f4:55:a0:68:22:ce:67:
bb:08:cb:46:4b:a9:5e:a0:d3:88:af:83:ca:db:9c:e4:a1:64:
9b:79:a4:ee:5f:3f:52:47:a2:74:fe:b6:aa:6f:1b:dc:4f:98:
8d:22:7f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:50:23 2025 by rpki-client