Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
File: _Zrjdhfz--SIgLIw_nx84PDcQcc.cer (raw, json)
Hash identifier: 9pvrc9l4YI0GpIGxCZK75NO1jUbhpMHLQplAUNl0zbw=
Subject key identifier: FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1AD0CD4E836D7C7171E36062AF684
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:47:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197505
IP: 46.255.128.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ad:0c:d4:e8:36:d7:c7:17:1e:36:06:2a:f6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7a:29:14:01:42:18:42:77:46:2d:cb:e6:76:
6c:df:7d:15:30:76:60:f3:63:c4:15:64:4e:01:01:
61:a2:3a:10:27:16:28:d4:c1:87:fb:b5:71:67:98:
94:18:4d:26:ee:61:f6:0c:65:db:30:05:9c:92:cd:
da:ba:43:f2:fe:1d:5c:f9:c4:8e:96:fa:49:f9:b4:
7f:7f:55:e9:8e:99:f1:d1:c8:b8:9c:e5:50:45:1d:
0a:44:65:a5:3d:d4:31:2c:78:50:2c:aa:a3:b9:0b:
63:9f:65:00:3f:d3:04:35:f3:ad:fb:57:a5:21:b1:
e1:d9:8d:c9:75:96:2f:a4:2e:8a:f8:12:a3:bd:ac:
f2:ba:8f:c5:da:44:18:dd:11:4b:67:5f:c4:fa:94:
f6:5a:0a:2c:c3:36:2f:a7:4e:98:d0:4d:b3:75:b8:
54:46:57:6d:21:1c:5a:9a:32:6f:f5:f5:10:c4:80:
40:72:4b:20:60:d7:69:8c:20:76:67:17:b2:9e:8b:
ea:6a:7d:c9:bc:ee:ee:19:7b:38:0b:c9:54:af:0e:
56:9f:b1:62:4f:1a:8e:3e:f6:a2:a5:87:33:01:d4:
47:f8:df:24:97:fe:bd:fa:27:d1:55:44:dd:11:50:
4b:87:ff:97:ff:45:d3:10:c2:c0:a1:d6:e7:bc:c3:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.128.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197505
Signature Algorithm: sha256WithRSAEncryption
45:85:a5:69:b3:a3:c5:14:03:3e:48:37:1d:ee:8c:fd:4f:40:
1a:b2:17:84:ab:c1:e4:90:a2:d5:a3:8a:34:88:9b:5a:f7:19:
86:7e:2a:45:43:98:e0:50:b6:92:a2:32:2e:95:d6:96:5d:a4:
ac:a3:ac:69:73:d3:a6:71:8f:96:46:f8:79:a5:78:40:1f:72:
53:b1:e8:9e:04:7e:2c:2f:4d:39:ce:1b:88:ee:cd:6f:61:3d:
88:2b:5b:55:25:27:25:d6:d2:d5:bf:57:4a:4f:5f:b9:fe:4f:
0d:f9:39:a4:fc:90:4a:86:a0:dc:76:e8:c9:17:6b:c3:e3:36:
e5:41:0d:0c:9c:96:9a:13:8d:8b:03:30:0f:52:d9:07:c4:e4:
91:a9:a7:da:da:9c:5b:b8:0c:91:88:a9:ea:13:12:34:84:9b:
9f:d8:19:c3:0c:f7:2f:92:5b:08:df:b6:36:96:55:91:1f:fc:
db:00:3d:ca:71:f5:22:1f:e4:e3:c9:db:b7:33:81:e7:63:be:
23:96:31:60:12:f2:61:89:21:4b:1d:cc:db:e3:f3:5e:20:fd:
72:3b:25:99:82:b1:9c:06:b6:9d:41:5d:7a:aa:26:8f:a9:65:
24:8a:50:99:8f:2a:09:69:86:dd:ce:31:08:e0:b1:e7:96:01:
1b:e6:4b:65
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQhsa0M1Og218cXHjYGKvaEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDlhZTM3NjE3ZjNmYmU0ODg4MGIyMzBmZTdjN2NlMGYwZGM0MWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXopFAFCGEJ3Ri3L5nZs330VMHZg
82PEFWROAQFhojoQJxYo1MGH+7VxZ5iUGE0m7mH2DGXbMAWcks3aukPy/h1c+cSO
lvpJ+bR/f1Xpjpnx0ci4nOVQRR0KRGWlPdQxLHhQLKqjuQtjn2UAP9MENfOt+1el
IbHh2Y3JdZYvpC6K+BKjvazyuo/F2kQY3RFLZ1/E+pT2WgoswzYvp06Y0E2zdbhU
RldtIRxamjJv9fUQxIBAcksgYNdpjCB2Zxeynovqan3JvO7uGXs4C8lUrw5Wn7Fi
TxqOPvaipYczAdRH+N8kl/69+ifRVUTdEVBLh/+X/0XTEMLAodbnvMPN8wIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFP2a43YX8/vkiICyMP58fODw3EHHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNmL2M4ZjQx
ZC1lYTczLTRhMDMtYmE3Mi0wZjUwNzczYjBlZGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvYzhmNDFk
LWVhNzMtNGEwMy1iYTcyLTBmNTA3NzNiMGVkZS8xL19acmpkaGZ6LS1TSWdMSXdf
bng4NFBEY1FjYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDLv+AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMDgTANBgkqhkiG9w0BAQsFAAOCAQEARYWlabOjxRQDPkg3He6M/U9AGrIXhKvB
5JCi1aOKNIibWvcZhn4qRUOY4FC2kqIyLpXWll2krKOsaXPTpnGPlkb4eaV4QB9y
U7HongR+LC9NOc4biO7Nb2E9iCtbVSUnJdbS1b9XSk9fuf5PDfk5pPyQSoag3Hbo
yRdrw+M25UENDJyWmhONiwMwD1LZB8Tkkamn2tqcW7gMkYip6hMSNISbn9gZwwz3
L5JbCN+2NpZVkR/82wA9ynH1Ih/k48nbtzOB52O+I5YxYBLyYYkhSx3M2+PzXiD9
cjslmYKxnAa2nUFdeqomj6llJIpQmY8qCWmG3c4xCOCx55YBG+ZLZQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:51:57 2025 by rpki-client