Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer
File: anNsvQAR2jHSmwYeX_TWOELaKko.cer (raw, json)
Hash identifier: zm+d2oPB1i7lMz+3y8bOsIRkiNHIdVEwT4FF8kcNXHQ=
Subject key identifier: 6A:73:6C:BD:00:11:DA:31:D2:9B:06:1E:5F:F4:D6:38:42:DA:2A:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7301078708308F516B40098796453
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59834
IP: 185.69.148.0/22
IP: 2a05:2280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:30:10:78:70:83:08:f5:16:b4:00:98:79:64:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a736cbd0011da31d29b061e5ff4d63842da2a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:aa:79:58:59:37:28:9d:35:f3:b2:cf:e7:
f5:a9:a9:16:40:73:7a:cd:19:ad:8c:3e:60:54:a9:
31:3f:d8:9a:31:22:8a:82:c6:ad:57:cf:d4:d0:16:
bc:cc:7a:ee:54:33:bc:7a:6f:86:ef:fc:72:a8:be:
b5:3f:c1:84:42:8a:27:bc:75:70:8b:2b:55:fc:dd:
17:ae:c5:95:39:3c:99:1c:37:8b:85:df:f7:c2:fd:
fe:49:73:da:4b:7f:a2:2c:2a:5e:ed:61:6b:e9:34:
20:84:49:43:4a:37:0d:eb:02:e7:a4:f3:a3:64:1b:
a8:28:d7:6d:e9:21:87:a7:2d:18:bf:a2:e7:1c:84:
06:ca:9f:91:1a:29:20:a0:70:1b:6b:f0:32:fd:b4:
6e:c6:5d:6f:2d:7d:48:c6:c7:88:92:b8:7a:0f:a2:
fd:f4:26:c8:39:78:4f:f0:60:be:e6:22:3b:19:2a:
6a:46:5c:ca:93:c0:53:44:51:58:75:17:11:28:dd:
5c:85:59:72:fe:bf:61:93:96:a5:7c:cb:07:14:2e:
a8:bf:4f:53:3a:8c:11:c7:fd:1c:1c:45:dd:13:eb:
73:90:c3:b2:18:fe:23:41:af:69:d6:5a:1e:14:34:
0c:23:10:8a:46:8f:a0:8b:77:0b:df:73:34:68:b7:
3c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:73:6C:BD:00:11:DA:31:D2:9B:06:1E:5F:F4:D6:38:42:DA:2A:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.148.0/22
IPv6:
2a05:2280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59834
Signature Algorithm: sha256WithRSAEncryption
3c:a5:21:31:ca:8c:fb:42:a3:d6:dd:85:51:b0:a7:04:41:6d:
ba:ff:cd:ab:60:21:dd:de:50:30:67:56:1c:b5:f5:1d:97:a7:
e0:1b:8d:47:34:86:8c:36:a2:70:1f:e2:cd:f7:f2:8f:32:9e:
01:98:2a:09:5d:b0:13:3c:02:ca:e3:86:be:c4:17:9d:53:6e:
ca:44:6b:b9:22:7d:88:ab:73:1e:f5:d8:5d:3e:cf:56:b3:65:
8e:80:10:c6:9a:a4:53:ae:1c:ad:0a:91:82:32:55:dd:0b:89:
ed:a2:6b:d8:17:1f:fe:75:90:46:57:1a:4f:a5:b4:14:38:d0:
21:0a:b0:d6:2b:71:04:64:d3:ec:34:4e:f0:f9:da:79:aa:4a:
70:6f:a8:c9:60:e1:f0:35:c1:bd:2f:7a:1e:96:8e:f5:d5:91:
db:2f:56:75:c8:29:71:02:70:3e:7c:ed:97:df:d8:45:2c:3b:
36:3f:2c:a0:a9:d6:88:e5:17:db:4c:d3:e3:f6:27:8e:a0:44:
a4:67:de:ad:e7:a8:95:c0:7e:fb:d0:df:7c:99:85:7d:8a:d2:
9f:42:cd:af:af:93:1e:a2:b2:2b:77:84:f7:2f:90:4a:01:ec:
10:22:69:b0:45:f7:9c:f4:b6:1e:95:6e:9e:3b:01:c3:b7:96:
a1:c6:48:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:44 2025 by rpki-client