Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
File: _5JbpaQQRnlkY0z_SvrXelbaRyI.cer (raw, json)
Hash identifier: XsR2E6ow7u48IrXwPlSmm/O1gzcne1tUD7HjUjFGVOg=
Subject key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E2FE4ABF5F9C1A40C2C7389CEA794
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200071
AS: 201718
IP: 185.37.244.0/22
IP: 185.62.208.0/22
IP: 2a03:120::/32
IP: 2a04:72c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2f:e4:ab:f5:f9:c1:a4:0c:2c:73:89:ce:a7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff925ba5a410467964634cff4afad77a56da4722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:48:9a:05:cc:f9:6e:55:c0:96:7d:3c:47:13:
26:3e:c6:64:e8:c7:d8:9a:88:d3:19:cf:da:6f:c7:
69:80:1f:c4:27:4d:b7:e9:7b:aa:e8:17:9b:f6:a5:
57:1b:39:2d:7d:b4:f4:16:63:c8:2b:f1:17:bc:b6:
4a:22:7b:94:1a:1c:02:e2:92:bc:30:86:2a:f1:03:
b0:f1:60:5f:12:7b:ed:f5:f6:a1:f0:8f:c2:e0:a6:
f8:2a:6b:c3:36:1d:c0:74:28:a2:8b:53:6c:16:54:
ae:ab:5d:48:3e:98:10:e1:70:a9:79:fa:b7:a0:05:
28:c0:d0:ee:cf:05:8c:0c:25:e8:10:b1:ca:30:95:
87:b8:a8:ed:86:88:aa:6e:44:a2:3d:9a:2b:9f:ad:
bd:bc:9e:50:e7:58:24:06:fc:52:7b:4e:83:00:8b:
49:eb:b6:63:2a:3d:53:a3:8e:0a:bd:e2:dd:92:a4:
14:0b:49:d1:ee:3d:09:3e:00:a4:cd:e5:3c:8b:cc:
d2:bc:35:35:9c:13:66:82:4a:45:74:6b:c9:6c:34:
95:90:4f:6f:52:cb:e2:cb:7c:43:28:61:ec:19:f2:
e0:1d:1c:a3:38:53:cc:a9:cc:10:27:30:00:8f:94:
32:c0:49:0e:41:5e:56:6f:4f:bb:ed:f3:46:3c:8c:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.244.0/22
185.62.208.0/22
IPv6:
2a03:120::/32
2a04:72c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200071
201718
Signature Algorithm: sha256WithRSAEncryption
a0:88:4c:dc:0c:82:43:4a:d5:93:96:01:67:61:f5:24:36:d8:
ef:f2:b3:ae:7c:2b:74:bc:e4:96:e5:76:7a:96:df:23:6c:f2:
0f:a8:64:22:dc:54:a4:0a:cf:e3:6f:29:c5:98:ef:78:ae:50:
cd:46:43:fe:b4:9b:d9:be:3c:0a:8c:8d:4f:6b:75:ec:6c:9b:
29:61:a5:00:33:d7:77:e7:29:38:00:c9:87:fc:db:20:d8:6b:
24:c2:8c:33:1e:ac:55:b4:80:e6:a3:c0:99:96:e2:9b:3a:de:
a4:03:32:a2:cc:36:80:19:11:a3:4c:87:1c:a8:a8:1e:2a:11:
06:4c:d2:c1:ba:41:39:ce:e0:ff:fd:41:36:01:19:f2:7a:9a:
4f:5d:6d:3c:79:17:88:1e:2d:87:f0:64:5d:1c:a9:6a:54:58:
47:68:5c:91:10:3b:2b:4c:fb:f0:78:d7:06:43:56:0b:24:f6:
f7:be:1d:5f:72:a3:ac:2f:c5:60:45:81:a5:1a:4b:8e:51:99:
b9:2b:ed:5a:42:b1:5e:83:4d:4c:31:b6:64:8e:0d:1d:d3:6d:
29:17:00:c1:1f:50:c6:c0:dc:d1:3c:e3:db:0d:27:18:6c:90:
13:6c:44:50:de:8f:02:e1:6e:12:a9:a0:70:dc:b9:79:56:47:
3a:00:e5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:10 2025 by rpki-client