Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
File: axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer (raw, json)
Hash identifier: veA6NQ7WxupBijIOktFoJ1KQxdGPiVMiV/sKcSPjLSU=
Subject key identifier: 6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA041E0AD3155C9AEF26347C9A3DE0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202312
IP: 91.200.88.0/22
IP: 2a0c:69c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:04:1e:0a:d3:15:5c:9a:ef:26:34:7c:9a:3d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:eb:34:47:de:07:51:ab:f4:09:8c:e1:b4:
81:92:39:2e:90:71:9f:4f:5f:b8:39:21:87:19:21:
85:0e:8c:a7:4f:29:43:8d:fe:30:09:f6:0a:1c:b4:
38:9f:dd:a9:24:85:07:b5:f2:4c:3f:da:79:16:12:
81:6e:8c:62:2d:62:a3:32:13:ef:5f:06:12:33:8d:
7b:10:8b:b0:d9:2e:22:09:9d:af:2f:f3:36:ae:42:
1a:79:2b:36:42:58:25:84:6c:e9:fe:92:fc:30:47:
27:f5:cd:8e:07:2a:b3:66:e7:a9:d4:b3:2f:aa:69:
ee:53:3c:c4:f5:ba:6b:e3:ad:00:1d:bb:fb:88:64:
7e:1b:d5:d9:09:7b:18:ef:04:53:62:96:41:ef:fa:
c6:e6:fd:2a:79:0e:a5:06:f6:44:3d:be:ce:02:8e:
cf:d3:71:33:27:b0:00:85:a7:47:1d:09:36:64:c3:
62:ad:07:40:01:52:c3:25:81:b1:d1:e3:c0:7a:ed:
8a:8b:ae:99:cd:d3:0c:c2:3d:b9:e4:b1:68:55:63:
6e:f9:f5:83:3f:2f:7e:b9:ac:3b:5e:02:72:7a:71:
0e:9e:d6:60:41:76:c9:12:a2:8b:9c:21:8b:50:c9:
7a:3f:5e:97:66:06:0c:53:da:a3:98:80:ca:10:95:
75:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.88.0/22
IPv6:
2a0c:69c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202312
Signature Algorithm: sha256WithRSAEncryption
a5:69:b3:67:84:c7:4e:db:b5:67:ce:f8:ee:7f:ad:03:ad:71:
37:eb:ab:f0:bd:3c:bc:fd:56:73:8a:d4:90:88:96:dd:27:19:
e6:75:2a:ab:3c:a1:16:87:7e:d2:53:b0:67:a4:6c:86:62:46:
cc:ad:65:7c:3b:31:b0:39:f7:98:81:43:5e:f8:37:2b:0f:42:
11:f4:f1:11:65:02:08:3e:62:b7:c6:7a:53:7f:a0:3d:e8:01:
4f:1b:4f:ef:3a:84:94:4e:f4:f9:11:72:78:3e:22:bf:61:ad:
fe:6a:c3:08:76:46:e3:df:26:9d:0d:ff:6a:53:0c:35:a8:39:
d1:18:0a:9c:35:cd:84:6b:27:d0:01:c6:90:67:3c:d2:09:01:
b1:ed:85:53:84:cf:2b:08:67:98:81:34:8c:7e:25:19:54:35:
96:8f:0c:53:c9:22:c8:cd:01:67:18:2b:f3:0f:ff:ae:0d:86:
5e:95:eb:aa:6b:6d:cd:36:41:d4:45:a0:14:ea:6c:53:24:05:
44:46:b5:9c:c0:4c:b9:0b:1d:ce:b8:37:de:47:25:35:31:26:
9a:5a:80:e2:a1:6e:97:09:f0:c3:77:87:54:61:c1:20:87:c8:
82:ef:10:0a:cb:47:e4:fc:1c:0c:f0:7b:4d:c5:96:6e:9b:85:
8a:3c:64:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:45:47 2025 by rpki-client