Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
File: a69yXnGSRAQZZKCTcOF_vvu7qvY.cer (raw, json)
Hash identifier: s8GavOX1+SDr1TyODFVXMjuuG7PTc+oQ2auNiSiw8W8=
Subject key identifier: 6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F6A6D4FD0AAA2C0C546E0F12654D6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47766
IP: 91.208.139.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6a:6d:4f:d0:aa:a2:c0:c5:46:e0:f1:26:54:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6baf725e719244041964a09370e17fbefbbbaaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:0f:89:b4:8c:c6:53:2b:9e:be:84:ce:2c:
2c:26:c0:ff:b6:25:87:e8:19:d0:40:40:b3:30:ef:
df:3d:9a:6a:25:36:5c:5f:54:da:3c:5f:68:2a:09:
95:f8:ed:d7:0a:69:96:18:9e:34:29:8c:51:4a:87:
41:25:7a:41:aa:a7:b6:63:9f:27:f1:f9:07:76:fa:
3b:d8:e9:e2:39:66:37:0d:8e:6f:fa:fa:af:3e:e0:
66:fd:69:ea:d6:e4:30:db:94:45:59:4f:ba:c4:9c:
e5:9a:bd:27:96:cc:80:e3:fc:31:29:54:ed:28:b7:
a5:df:a1:a8:c4:f6:f4:7e:67:22:8e:b7:e5:49:91:
fa:1d:69:91:ac:e0:00:55:43:c8:6a:5a:40:73:a0:
57:aa:a1:48:7a:cd:b6:fc:b3:89:cc:d1:00:36:89:
94:78:51:ca:ed:b3:d6:c2:62:6f:d9:9e:1a:d0:51:
26:11:1d:0c:f0:62:95:30:f1:0b:65:fd:6d:cc:cf:
6e:33:57:bc:2a:79:51:c1:07:a3:2d:40:9f:c6:13:
82:cc:8c:c7:1a:e6:b5:e9:fd:40:4b:c5:52:03:26:
b8:39:ce:fa:da:2e:63:55:e7:8b:4e:62:1f:81:75:
99:b1:19:b1:8b:b4:58:03:df:da:80:7d:21:ba:b2:
e8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.139.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47766
Signature Algorithm: sha256WithRSAEncryption
77:24:4e:75:a5:83:7a:cc:2e:83:36:8d:ba:7b:24:68:28:47:
58:0b:96:81:47:ac:98:7e:10:d5:4b:3d:61:74:7e:20:62:ae:
bc:39:17:5b:b9:2b:4a:74:64:f0:54:99:29:2a:38:71:e0:9f:
62:90:91:71:b4:cd:1b:96:a3:1b:23:e8:d5:50:82:76:1b:4b:
14:82:65:02:67:97:9b:21:b6:ad:d9:76:d6:1a:da:ff:15:15:
36:d7:52:c9:89:09:89:78:56:4a:1e:a7:06:7e:98:03:eb:ac:
bf:eb:66:1d:d2:42:c8:a9:92:f1:cc:93:a3:c3:2a:b8:2f:a5:
44:3d:b1:44:0b:77:ac:ce:d0:bf:cd:ff:da:21:89:3b:d8:21:
2f:0e:b4:0b:5f:67:3d:0c:7d:1b:c6:d6:c3:87:f8:f1:45:75:
bb:5e:1f:c8:da:3f:20:a3:83:e9:58:29:a8:b0:e0:59:79:05:
75:06:b8:61:53:e3:29:48:6b:ac:0b:45:48:e8:31:6a:b9:ff:
35:c9:e2:8c:33:83:30:fe:7b:9e:2d:1d:22:48:0b:59:70:ee:
3a:8e:0f:1d:11:82:d7:73:fb:e4:4d:a5:3c:96:7c:ac:25:82:
50:4c:b9:1e:7d:22:04:ef:5f:f5:d7:74:9a:1e:6a:2e:b6:1f:
11:5f:17:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:22 2025 by rpki-client