Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aNLCXQU0pAJ8aVViqM5PABzVOW8.cer
File: aNLCXQU0pAJ8aVViqM5PABzVOW8.cer (raw, json)
Hash identifier: qzoe47V/Q36mPJc6xO93z2YaiEZG/NCsMowNF6YiR5c=
Subject key identifier: 68:D2:C2:5D:05:34:A4:02:7C:69:55:62:A8:CE:4F:00:1C:D5:39:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB27BA493CA58802DD2F7F53BC0D3E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41015
IP: 185.90.84.0/22
IP: 2a05:df80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:27:ba:49:3c:a5:88:02:dd:2f:7f:53:bc:0d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68d2c25d0534a4027c695562a8ce4f001cd5396f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:a1:6e:3d:22:16:75:bf:cd:6e:15:c5:2f:
99:c2:be:5a:eb:d6:be:01:d8:e7:99:c6:56:0e:14:
92:5a:ef:75:a3:b5:63:1d:2c:07:b2:54:84:27:ec:
04:73:23:11:9b:ab:17:83:b1:a2:72:d6:c0:35:f4:
b7:bf:ec:ee:ae:54:b5:f0:23:7d:ff:d4:53:b2:dd:
44:1f:b1:9f:fd:f6:35:e2:df:7d:86:83:b3:42:05:
62:e3:e3:bb:a1:8e:7c:9a:25:8d:6b:97:12:68:f7:
db:28:a0:2c:7a:74:e6:7d:68:0c:1c:48:8b:01:eb:
82:1e:e8:d5:4c:2b:ab:c4:fe:e3:d2:3e:fe:08:7a:
ac:e2:c0:e2:b9:3a:e6:6b:63:43:8c:1d:50:66:17:
bb:8d:b3:99:82:e5:e6:f6:a5:ca:df:a4:ac:90:c8:
22:c5:54:50:2e:a0:71:39:fd:95:f0:44:e7:44:3a:
b0:8c:40:31:e8:57:b3:16:46:1e:d3:c5:62:0d:aa:
99:0b:a9:37:ef:18:36:7e:6f:7a:54:4b:17:91:a5:
2a:42:21:5e:cd:df:da:a2:ac:4a:22:d8:5b:0d:23:
1e:73:2b:41:0f:cb:76:b4:c9:3d:a6:c4:d1:56:30:
28:15:5b:4d:28:58:05:2f:47:14:7a:b4:23:8f:da:
e2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D2:C2:5D:05:34:A4:02:7C:69:55:62:A8:CE:4F:00:1C:D5:39:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.84.0/22
IPv6:
2a05:df80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41015
Signature Algorithm: sha256WithRSAEncryption
15:87:a0:00:4a:e6:2d:4a:95:b1:cf:9b:6e:43:f9:3c:ce:40:
de:33:48:5c:09:2b:b6:c0:dd:32:5c:cd:9f:ca:a8:e4:a5:6b:
20:ee:6d:66:3d:95:be:a6:d3:a3:09:dc:e0:29:31:75:f7:9a:
61:2a:ec:db:fc:76:a7:9d:b3:b6:c9:38:09:c6:c3:03:3d:38:
f3:97:a2:82:27:02:d6:99:28:4c:4b:a4:cf:b5:0a:be:4b:e1:
0d:42:9c:51:41:b4:07:47:c6:e5:5f:90:05:6c:c7:1c:47:11:
e1:7e:cb:91:21:ec:46:e8:93:09:7b:ca:89:e0:a8:6e:1f:c9:
ee:3a:40:13:87:f4:1f:e5:fc:77:37:ff:c3:4d:8b:8d:75:ea:
e7:a6:16:8b:41:04:b1:a0:69:22:c2:23:6a:12:e3:d8:80:e1:
f5:51:b3:31:a4:1c:ed:de:32:a0:39:92:5e:2e:59:1f:b2:f3:
9f:4a:cb:2e:d5:3f:24:c5:2d:1f:44:80:7b:32:a6:ca:47:e4:
0b:24:28:67:da:e2:58:6a:6a:07:de:9e:3c:73:68:7f:93:3f:
f2:4f:26:0e:25:b0:70:21:d8:b0:93:94:5f:2e:f4:eb:99:62:
5d:07:a3:73:c5:20:c9:74:e5:5f:25:2d:a4:56:71:d3:04:8b:
68:b2:b4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:55 2025 by rpki-client