Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
File: apc35u85FOD8zAaQI76XGYuRN5E.cer (raw, json)
Hash identifier: YmJcdc/z/RjTYlPaGTajT64p1HWqLPKI+dzZBD5SKsA=
Subject key identifier: 6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747FAAD1E40F009F1FF0B74424BC7A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60898
IP: 123.100.234.0/24
IP: 185.23.232.0/22
IP: 2a00:6ea0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:fa:ad:1e:40:f0:09:f1:ff:0b:74:42:4b:c7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a9737e6ef3914e0fccc069023be97198b913791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c7:d3:f8:ef:ab:e5:9b:61:ad:02:c9:d2:39:
9a:2c:73:a6:7d:83:85:12:1e:c9:a2:67:46:77:24:
ba:08:2c:d5:ad:9c:e1:82:c3:9c:f7:b7:ed:51:8b:
b9:19:60:b0:e8:bd:7f:4d:95:88:f0:d3:14:9a:0a:
42:5d:12:fd:47:41:f6:e7:30:a6:fd:be:6f:e9:d8:
d2:3e:4b:4a:b5:e6:90:63:37:e5:e3:58:f0:ab:8a:
3f:c9:35:8b:b7:ec:3a:ba:2f:1f:59:1d:99:25:db:
8b:80:0c:2c:aa:46:b7:c2:42:d6:24:f1:63:9c:62:
af:22:a2:d4:e6:7c:c1:7b:e7:94:ac:e5:de:a4:dc:
c2:b5:10:a7:32:37:38:8c:74:56:1d:bd:f8:25:f6:
0f:63:ab:c2:e3:04:fb:22:19:6c:cd:18:93:33:d2:
9d:d5:d3:5f:35:c1:3f:99:da:4e:d5:a5:74:26:61:
22:e5:bc:be:e0:2f:78:bd:6c:28:64:54:ad:2e:68:
31:18:b4:eb:16:29:87:27:63:75:12:84:2a:2f:21:
d6:8a:2f:ea:42:5c:0c:23:d7:21:85:d8:e1:a8:89:
d0:3e:a5:c7:77:5d:ea:13:37:79:db:e9:0e:d3:2b:
fb:7f:bc:42:03:07:4a:d9:42:40:bd:0e:3b:be:6c:
84:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.100.234.0/24
185.23.232.0/22
IPv6:
2a00:6ea0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60898
Signature Algorithm: sha256WithRSAEncryption
8b:c2:77:50:f1:b4:98:d8:cc:4f:20:8c:bd:14:14:dd:7a:4a:
20:a8:6a:b7:fe:a4:fd:93:5b:c9:a6:0c:a4:e2:ba:08:d0:4d:
b0:17:6f:8d:38:ca:64:d1:41:b9:58:a9:dd:0e:da:90:f9:45:
ff:66:21:16:95:d1:11:47:46:fe:df:7a:b2:43:40:d7:18:ed:
5b:5c:c5:80:ac:34:c8:ef:01:3d:8c:21:8b:81:fa:42:e9:9b:
e9:8b:81:6e:03:82:a2:b5:f2:78:a5:f5:05:2f:79:ec:e5:25:
0b:f0:64:df:9b:b3:ef:a6:3e:5e:83:f2:da:af:64:fe:b9:3c:
0c:b1:d6:99:e8:c5:a0:1c:f4:45:83:26:6d:ad:6a:d6:2e:51:
32:e5:e5:7a:3b:b9:79:03:30:82:f3:b0:f9:3c:c9:71:1f:9d:
ab:31:e5:68:34:c8:59:6e:bc:e4:61:9a:00:c0:af:8c:7a:b9:
74:9b:82:e6:18:be:44:01:0c:8d:a8:88:d8:61:c3:62:d0:d7:
c7:23:94:9a:73:16:7c:0b:10:19:09:0d:b9:4e:31:f9:91:4e:
9b:9a:2d:e7:45:50:ee:8f:78:4d:8a:e6:9d:cb:f3:9e:b9:35:
57:b3:4d:5d:0d:aa:c7:57:14:b2:2e:3d:4b:07:bf:18:30:28:
69:1f:70:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:34 2025 by rpki-client