Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
File: aDg_-p8gvwIcCQJimUIS1xZn7QI.cer (raw, json)
Hash identifier: JCCGalzi4OuzvjjHX3Fo7Y1xDWNI9X1du0vi+LgyS+w=
Subject key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B20A22D55CF4E5465707E52CA6D08C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25048
AS: 48901
IP: 81.90.128.0/20
IP: 2a00:e20::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0a:22:d5:5c:f4:e5:46:57:07:e5:2c:a6:d0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68383ffa9f20bf021c090262994212d71667ed02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5e:1d:84:e3:25:ed:aa:50:81:bc:41:78:01:
8e:33:d4:20:6b:35:eb:0e:b7:a1:39:cb:49:91:fa:
83:72:ff:44:03:52:70:7d:14:b2:a3:18:93:2a:c8:
13:e9:04:e3:d5:f7:ea:7c:98:bf:4c:cb:7d:d1:7b:
c0:c4:27:f1:4b:15:49:aa:5c:a1:1e:2d:95:fa:fa:
0c:fc:3c:72:d0:05:c8:f9:9a:79:c2:98:9e:78:5b:
d1:16:5d:92:79:ef:ba:d7:08:58:3a:cd:45:40:4a:
56:41:d2:73:02:56:82:f1:64:1c:27:dc:9e:79:b3:
b7:91:cc:c0:54:54:84:4a:0a:75:0c:8d:7c:39:1e:
e9:b0:02:5f:be:8b:5f:f4:3c:e4:e7:8b:0e:19:5f:
3f:b6:1a:20:3a:bc:b1:b0:da:ab:d9:27:0f:a1:6e:
40:e3:13:c9:a1:a4:eb:97:93:a6:39:9f:df:b6:c3:
73:f0:47:a2:21:e2:61:bd:cf:c8:6c:0d:d1:a2:d8:
cf:ab:c8:6d:e5:1b:8c:a9:6c:0c:5a:2a:0d:61:ed:
ff:0c:57:cc:b0:4a:8b:6d:98:30:e6:08:e0:86:82:
99:2c:fd:a3:da:5e:d9:dc:93:c4:4d:55:4c:2a:43:
81:2d:63:97:45:c8:f9:98:dd:0c:3c:76:e4:fe:41:
fa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.128.0/20
IPv6:
2a00:e20::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25048
48901
Signature Algorithm: sha256WithRSAEncryption
44:c5:7e:5c:a6:8f:a9:86:89:c0:a3:d6:62:a4:2b:7d:bb:a0:
bd:10:aa:e8:66:71:a0:42:9d:71:fa:da:4e:bb:03:8b:61:0a:
93:f6:4d:91:5d:78:3f:56:fd:db:6b:9a:0b:72:ea:4b:e8:0c:
a4:41:60:a9:55:48:4b:2c:61:84:5c:be:eb:b7:f8:2b:5b:98:
f2:8f:4f:6c:f9:a9:a8:a2:f1:48:46:ae:39:21:a2:83:f0:eb:
b9:af:c9:9f:aa:54:b2:92:be:61:0f:dc:b6:5a:84:ac:c8:13:
23:d3:f9:0a:4d:bd:08:41:9c:00:3b:1e:f9:7f:49:0b:56:a5:
c9:f3:ea:dc:89:74:50:19:5f:f5:87:58:49:7f:2d:12:4b:6a:
5d:e4:6d:f3:10:de:b2:2b:8e:ef:cf:e3:ab:e9:14:85:39:71:
2a:34:dc:3e:a3:af:2b:67:59:c5:a7:26:9f:7e:fa:90:a0:d8:
30:86:80:54:9f:76:99:3a:b3:b4:bf:bb:5a:68:54:9c:95:01:
c0:37:5d:23:ca:43:3c:bb:8f:34:a6:d7:18:ac:18:c8:24:d7:
bd:0c:17:44:e6:18:59:9a:71:d9:11:e2:dd:87:fe:66:35:11:
02:09:c9:43:e4:a3:21:60:e4:14:a4:2a:d4:48:1e:4c:5f:64:
b6:21:05:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:34 2025 by rpki-client